Kernel Software Vulnerability in GPU Firmware from Imagination Technologies
CVE-2026-45198

7.8HIGH

Key Information:

Vendor

Imagination Technologies

Status
Graphics Ddk
Vendor
CVE Published:
7 August 2026

What is CVE-2026-45198?

A security issue exists in Imagination Technologies' GPU Firmware related to the misuse of pointers from non-secure memory. When GPU Firmware interacts with the Rich Execution Environment (REE), it may use compromised data, allowing an attacker with control over the REE kernel to influence pointer values. This manipulation can lead to data corruption, potentially compromising the integrity and functionality of the GPU operations.

Affected Version(s)

Graphics DDK Linux 1.17 RTM2

Graphics DDK Linux 1.18 RTM2

Graphics DDK Linux 23.2 RTM2

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.