HIGH🇬🇧 English

CVE-2026-45195

CVSS 7.8v3.1pub. 2026-06-26upd. 2026-06-29

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware for more privileged memory accesses than are permitted by the system.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Imaginationtech Ddk

    APP
    Imaginationtech
    26.1≤ 25.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2026-21732CRITICAL9.6PL ✓ten sam produkt

Out-of-bounds write w kompilatorze GPU shader Imagination Technologies DDK

CVE-2025-13952CRITICAL9.8PL ✓ten sam produkt

Use-after-free w kompilatorze shaderów GPU biblioteki Imagination DDK

CVE-2025-25176CRITICAL9.1PL ✓ten sam produkt

Wyciek rejestrów bezpiecznych obciążeń przez środowisko niezabezpieczone — Imagination DDK

CVE-2026-21734HIGH7.7ten sam produkt

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a wri...

CVE-2026-22165HIGH8.1ten sam produkt

A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a writ...