PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-34194 Imagination Technologies CVE debrief

CVE-2026-34194 is a HIGH severity vulnerability with a CVSS score of 7.1. The vulnerability occurs when software installed and run as a non-privileged user conducts improper GPU system calls, causing mismanagement of a mapping state maintained for a sparse memory allocation. This happens because the product accidentally refers to the wrong memory due to the semantics of how math operations are implicitly scaled across buffers of different sizes.

Vendor
Imagination Technologies
Product
Graphics DDK
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-08
Original CVE updated
2026-07-23
Advisory published
2026-06-08
Advisory updated
2026-07-23

Who should care

Users of GPU drivers from Imagination Technologies should be aware of this vulnerability. The vendor is listed as Unknown Vendor, but evidence suggests the vulnerability may be related to Imaginationtech.

Technical summary

The vulnerability has a CVSS vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. It is classified under CWE-468.

Defensive priority

HIGH

Recommended defensive actions

  • Apply patches or updates from the vendor once available.
  • Review and update GPU driver software to ensure it is from a trusted source.
  • Consider implementing additional security measures for non-privileged user accounts.

Evidence notes

The CVE record was published on 2026-06-08T16:16:38.250Z and modified on 2026-06-09T13:57:49.980Z. The vendor is listed as Unknown Vendor, but evidence suggests Imaginationtech may be related.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-34194 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-34194

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-34194 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34194

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.imaginationtech.com/gpu-driver-vulnerabilities/

    367425dc-4d06-4041-9650-c2dc6aaa27ce

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.