CVE-2026-34195CWE-787

GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes

High · published June 12, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
40.4
In the wild
Unconfirmed
What it is

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel.

The product incorrectly indexes internal state when performing sparse allocation remapping.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00479 · 40.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-06-12T21:43Z
EPSS history
Timeline
  • 12 JUN 21:43Z
    GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes
    cvelistv5