What’s Vulnerable › Vulnerabilities
CVE-2026-45200: GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-04 · updated 2026-09-09
- Weakness: CWE-416
Description
Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that would cause an incorrect double free event when freed.
Affected products
- Imagination Technologies Graphics DDK: from 25.1 RTM2 through 25.3 RTM; 24.2 RTM2, 26.1 RTM1
References
Get alerted when CVE-2026-45200 or the next vulnerability affects your stack