← Database

CVE-2026-22166

HIGH CVSS: 8.1 Published: 2026-05-01 Modified: 2026-06-17

Description

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable subsequent exploit on the system.

Affected Platforms

Imaginationtech Ddk

Weakness Type

CWE-416

References