> CVE-2026-16280

« BACK_TO_HOME
PUBLISHED
2026-07-24 23:16
MODIFIED
2026-07-24 23:16
EPSS (Prob. Exploit)
0.53%
Top 55.1%
DATA SOURCES:
NVD 🔗 2026-07-25 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01

> DESCRIPTION

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-190

> CWE DETAILED DESCRIPTIONS

CWE-190: Integer Overflow or Wraparound - The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

> HISTORIQUE DES MODIFICATIONS

Première apparition
24/07/2026 23:16
Source: NVD
📊 ENRICHISSEMENT 01/08/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-190: Integer Overflow or Wraparound - The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will a...
Total des modifications: 1 Dernière mise à jour: 3 months ago

> REFERENCES

https://www.imaginationtech.com/gpu-driver-vulnerabilities/
« BACK_TO_HOME