GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation
Impact
Imagination Technologies Graphics DDK versions 23.2 RTM2, 24.2 RTM2, 25.1 RTM2, and 26.1 RTM1 are affected by an integer overflow weakness in libusc.so, potentially causing a crash or enabling further exploits. The vulnerability occurs during WebGPU shader compilation. Local access is required.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Imagination Technologies · imaginationtech
Graphics DDK
6 ranges
Imagination Technologies · imaginationtech
Graphics DDK
Compare with this publisher’s ranges. This does not inspect your installation.
affected
23.2 RTM2
custom versions
24.2 RTM2
custom versions
25.1 RTM2 → through 25.3 RTM
custom versions
26.1 RTM1
custom versions
unaffected
1.18 RTM2
custom versions
26.1 RTM2
custom versions
Other versions: unknown
Original source description
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handled, the compiler may dereference a NULL pointer at a controlled offset, resulting in a crash of the compiler process. On certain platforms, when the compiler process has system privileges this could lead to crashes or enable further exploits on the device.
The weakness results from performing arithmetic operations on values derived from the shader program without properly preventing integer overflow. The overflow can cause incorrect memory size calculations, leading to memory allocation failures and subsequent invalid program behaviour. Integer overflow can produce unexpected values that affect memory allocation and other security-relevant operations.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-18629View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 1
Assigning organization
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.