What’s Vulnerable › Vulnerabilities
CVE-2026-45201: GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-21 · updated 2026-10-18
- Weakness: CWE-1284
Description
Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated as higher order pages and allowing read and/or write access to the memory beyond 4K threshold.
Affected products
- Imagination Technologies Graphics DDK: from 25.1 RTM2 through 25.3 RTM; 24.2 RTM2, 26.1 RTM1
References
Get alerted when CVE-2026-45201 or the next vulnerability affects your stack