CVE-2026-21733

Awaiting Analysis Awaiting Analysis - Queue

GPU Memory Protection Bypass Allows Write Access to Read-Only Memory

Publication date: 2026-04-17

Last updated on: 2026-06-26

Assigner: imaginationtech

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is caused by improper handling of GPU memory reservation protections.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-17

Last Modified

2026-06-26

Generated

2026-07-06

AI Q&A

2026-04-17

EPSS Evaluated

2026-07-05

NVD

CVE-2026-21733

EUVD

EUVD-2026-23446

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-280	The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.

Attack-Flow Graph

Executive Summary

This vulnerability occurs when software running as a non-privileged user improperly uses GPU system calls to gain write access to memory and files that are supposed to be read-only in user mode.

The root cause is improper handling of GPU memory reservation protections, which allows unauthorized modification of protected memory areas.

Impact Analysis

An attacker exploiting this vulnerability could gain write permissions to memory and files that should be read-only, potentially leading to unauthorized data modification or corruption.

This could compromise the integrity of applications or data, possibly allowing further exploitation or system instability.

Hi! I’m here to help you understand CVE-2026-21733. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70