CVE-2026-16280
Last modified
CVE-2026-16280 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in memory corruption or information disclosure.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Imaginationtech | Ddk | < 26.1 | — |
| Imaginationtech | Ddk | 26.1 | Rtm1 |
References
- https://www.imaginationtech.com/gpu-driver-vulnerabilities/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-16280?
How severe is CVE-2026-16280?
How do I fix CVE-2026-16280?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-16273The Narrative Publisher WordPress plugin through 1.0.7 does …4.6
- CVE-2026-16274The Classified Listing WordPress plugin before 5.4.4 does n…2.7
- CVE-2026-16276The Classified Listing WordPress plugin before 5.4.4 does n…2.7
- CVE-2026-16277A stack-based buffer overflow was found in rpcbind's rpcinfo…6.5
- CVE-2026-16279An Improper Authorization vulnerability affecting 3DPassport…9.3
- CVE-2026-1628Mattermost Desktop App versions <=5.13.3 fail to attach list…4.6
- CVE-2026-16281The Classified Listing WordPress plugin before 6.1.1 does n…7.1
- CVE-2026-16282The Appointment Hour Booking WordPress plugin before 1.5.88…5.3
- CVE-2026-16285The Product Attachment for WooCommerce WordPress plugin befo…7.5
- CVE-2026-16286Unrestricted upload of file with dangerous type vulnerabilit…9.8
- CVE-2026-16287Improper neutralization of special elements used in an OS co…7.8
- CVE-2026-16289The ProfileGrid WordPress plugin before 6.0.0.0 does not pe…4.3
Are you affected by CVE-2026-16280?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST