# CVE-2026-65584: Imagination GPU DDK stack overflow in fence synchronization checkpoint processing

Source: https://junglewise.ai/threats/cve-2026-65584-software-installed-and-run-as-a-non-privileged-user-may-conduct  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-30. Updated: 2026-10-30  
License: CC BY 4.0 with a link back

CVE-2026-65584 · Severity: info · Published 2026-10-30

Imagination Technologies GPU driver allows unprivileged users to trigger a kernel stack overflow through improper GPU system calls when processing Linux/Android fence synchronization checkpoints. Successful exploitation can corrupt kernel memory and crash the system, causing a denial of service.

Technologies: [Imagination Technologies GPU DDK](https://junglewise.ai/threats/technologies/gpu-ddk). Vendors: [Imagination Technologies](https://junglewise.ai/threats/vendors/imagination-technologies).

## Quick answers

**Is CVE-2026-65584 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-65584 being exploited in the wild.

**How severe is CVE-2026-65584?** Informational severity, published 30 October 2026.

**Which products and versions are affected?** Imagination Technologies GPU DDK up to and including 25.2 RTM.

**Is there a fix for CVE-2026-65584?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-65584 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-65584?** Check whether you run Imagination Technologies GPU DDK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A buffer write vulnerability exists where excessive data from an internal buffer is copied beyond the allocated stack array during processing of resolved fence synchronization checkpoints (Linux/Android fences are affected; user checkpoints are excluded). An unprivileged attacker can conduct improper GPU system calls to trigger the overflow, leading to kernel memory corruption and typically a denial-of-service condition via kernel crash.

## Affected products

- Imagination Technologies GPU DDK up to and including 25.2 RTM

## Timeline

- 2026-10-30: disclosed

## References

- [https://www.imaginationtech.com/gpu-driver-vulnerabilities/](https://www.imaginationtech.com/gpu-driver-vulnerabilities/)

## Related threats

- [Imagination GPU DDK out-of-bounds array access via improper GPU system calls](https://junglewise.ai/threats/cve-2026-74911-software-installed-and-run-as-a-non-privileged-user-may-conduct)
- [Imagination GPU DDK integer overflow in buffer mapping](https://junglewise.ai/threats/cve-2026-49747-software-installed-and-run-as-a-non-privileged-user-may-conduct)
- [Imagination GPU DDK use-after-free in kernel module interface](https://junglewise.ai/threats/cve-2026-15465-software-installed-and-run-as-a-non-privileged-user-may-conduct)
- [Imagination GPU DDK out-of-bounds read/write in GLES render via WebGPU](https://junglewise.ai/threats/cve-2026-74915-a-web-page-that-contains-unusual-webgpu-content-loaded-into-the)
- [Imagination GPU DDK integer truncation in buffer mapping](https://junglewise.ai/threats/cve-2026-74912-on-gpu-systems-with-the-security-vulnerability-fix-for-applied)