critical9.8
CVE-2026-16280
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB.
Impact
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imaginationtech | Ddk | before 26.1 Version 26.1 |