CVE-2024-52938: Imagination Technologies Graphics Ddk

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert reconstruction activities to trigger a write of data outside the Guest's virtualised GPU memory.

Affected products

• Imagination Technologies Graphics Ddk: from 1.15 RTM, up to and including 24.2 RTM2

Published 2025-01-13. Last modified 2026-06-17.