Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.8 CVE-2026-41158

GPU DDK – Backed sparse PMRs are not handled by deferred free mechanism after shrink_CVE-2026-41158

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory all...

Imagination Technologies Graphics DDK 1.18 RTM CVE
MEDIUM 5.5 CVE-2026-41155

GPU DDK – SharedSecMem mapped into all GPU virtual address spaces_CVE-2026-41155

An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the...

Imagination Technologies Graphics DDK 1.18 RTM CVE
HIGH 8.8 CVE-2026-34195

GPU DDK – Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes_CVE-2026-34195

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel....

Imagination Technologies Graphics DDK 1.18 RTM CVE
HIGH 7.8 CVE-2025-56814

CVE-2025-56814_CVE-2025-56814

A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrary code via embedding shell metach...

n/a n/a n/a CVE
MEDIUM 5.5 CVE-2025-55663

CVE-2025-55663_CVE-2025-55663

A segmentation violation in the Track_SetStreamDescriptor function (isomedia/track.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Ser...

n/a n/a n/a CVE
MEDIUM 5.5 CVE-2025-55661

CVE-2025-55661_CVE-2025-55661

A heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supply...

n/a n/a n/a CVE
MEDIUM 5.5 CVE-2025-55660

CVE-2025-55660_CVE-2025-55660

A stack overflow in the gf_opus_read_length function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (...

n/a n/a n/a CVE
MEDIUM 5.5 CVE-2025-55652

CVE-2025-55652_CVE-2025-55652

A heap buffer overflow in the gf_isom_vp_config_new function (isomedia/avc_ext.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service...

n/a n/a n/a CVE
MEDIUM 5.5 CVE-2025-55650

CVE-2025-55650_CVE-2025-55650

A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Serv...

n/a n/a n/a CVE
MEDIUM 5.5 CVE-2025-55649

CVE-2025-55649_CVE-2025-55649

A NULL pointer dereference in the gf_media_map_esd function (media_tools/isom_tools.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Se...

n/a n/a n/a CVE