CVE-2026-18629
Received Received - Intake

Integer Overflow in GPU Compiler Leading to Memory Allocation Failure

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: imaginationtech

Description
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handled, the compiler may dereference a NULL pointer at a controlled offset, resulting in a crash of the compiler process. On certain platforms, when the compiler process has system privileges this could lead to crashes or enable further exploits on the device. The weakness results from performing arithmetic operations on values derived from the shader program without properly preventing integer overflow. The overflow can cause incorrect memory size calculations, leading to memory allocation failures and subsequent invalid program behaviour. Integer overflow can produce unexpected values that affect memory allocation and other security-relevant operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-18629
EUVD
EUVD-2026-113487

Affected Vendors & Products

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a web page with unusual GPU shader code that causes memory allocation failure in the GPU compiler process. If the failure is not handled properly, the compiler may crash due to a NULL pointer dereference. On systems where the compiler has high privileges, this could lead to crashes or enable additional exploits.

Detection Guidance

This vulnerability involves GPU shader code causing memory allocation failures due to integer overflow. Detection requires monitoring GPU compiler processes for crashes or NULL pointer dereferences. Check system logs for compiler crashes, especially those involving GPU-related processes. Examine shader code for unusual arithmetic operations that could lead to overflows.

Impact Analysis

This vulnerability could cause crashes in applications using the GPU compiler, potentially leading to denial of service. If the compiler runs with system privileges, attackers might exploit this to gain further control over the device or execute arbitrary code.

Compliance Impact

This vulnerability primarily affects system stability and security through GPU shader code manipulation, leading to potential crashes or privilege escalation. It does not directly impact compliance with GDPR, HIPAA, or similar standards unless such failures result in unauthorized data access or processing disruptions that violate regulatory requirements.

Mitigation Strategies

Update GPU drivers and compiler software to the latest patched versions to prevent memory allocation failures and NULL pointer dereferences. Monitor for crashes in GPU compiler processes and restrict system privileges where possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18629. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart