Dashboard / CVE-2026-34192

CVE-2026-34192

HIGH
MEDIUM Priority: 0.01 BB Relevance: 50/100
Published: 2026-06-19 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: High
A: High

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an error path leading to UAF of GPU page tables. The vulnerability allows physical memory allocated for MMU page tables to be used after being freed. This was caused by an error path that would not cleanup properly before freeing the physical allocation.

Weakness Classification (1)

References & Advisories (1)

Bug Bounty Relevance

50 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.7 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001620
Percentile 5.3%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00162
2026-10-29
0.00162
2026-10-28
0.00162

Intelligence Sources

nvd ref →

External Links