CVE-2026-21733
GPU Memory Protection Bypass Allows Write Access to Read-Only Memory
Publication date: 2026-04-17
Last updated on: 2026-04-23
Assigner: imaginationtech
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-280 | The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs when software running as a non-privileged user improperly uses GPU system calls to gain write access to memory and files that are supposed to be read-only in user mode.
The root cause is improper handling of GPU memory reservation protections, which allows unauthorized modification of protected memory areas.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability could gain write permissions to memory and files that should be read-only, potentially leading to unauthorized data modification or corruption.
This could compromise the integrity of applications or data, possibly allowing further exploitation or system instability.