# CVE-2026-58800: PowerVR GPU driver use-after-free in image view creation Source: https://junglewise.ai/threats/cve-2026-58800-in-img-vkcreateimageview-of-image-view-c-there-is-a-possible-way Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-11-10. Updated: 2026-11-10 License: CC BY 4.0 with a link back CVE-2026-58800 · Severity: info · Published 2026-11-10 PowerVR GPU drivers used in mobile and embedded devices contain a use-after-free vulnerability in image view creation that could allow remote code execution without requiring user interaction or special privileges. An attacker exploiting this could gain complete control over affected devices, potentially accessing sensitive data or installing malware. Vendors: [Imagination Technologies](https://junglewise.ai/threats/vendors/imagination-technologies). ## Quick answers **Is CVE-2026-58800 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-58800 being exploited in the wild. **How severe is CVE-2026-58800?** Informational severity, published 10 November 2026. **Which products and versions are affected?** Imagination Technologies PowerVR GPU driver . **Is there a fix for CVE-2026-58800?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **How is CVE-2026-58800 attacked?** It is attacked over the network, in device firmware. **Am I affected by CVE-2026-58800?** Check whether you run Imagination Technologies PowerVR GPU driver at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Technical details The IMG_vkCreateImageView function in image_view.c is vulnerable to use-after-free due to memory corruption, which can be triggered remotely to achieve code execution. The vulnerability requires no additional execution privileges and does not need user interaction for exploitation. This is a memory safety issue in the Vulkan graphics API implementation within PowerVR GPU drivers. ## Affected products - Imagination Technologies PowerVR GPU driver ## Timeline - 2026-11-10: disclosed - 2026-11-10: advisory: Published in Google Pixel Update Bulletin—November 2026 ## References - [https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01](https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01)