CVE-2026-21734

HIGH
MEDIUM Priority: 0.01 BB Relevance: 50/100
Published: 2026-06-26 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: High
A: High

Description

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device. An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
imaginationtech ddk < 25.2
imaginationtech ddk 25.3

References & Advisories (1)

Bug Bounty Relevance

50 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.7 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001620
Percentile 5.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00162
2026-10-28
0.00162

Intelligence Sources

nvd ref →