> CVE-2026-45198

« BACK_TO_HOME
PUBLISHED
2026-08-07 03:16
MODIFIED
2026-08-07 03:16
EPSS (Prob. Exploit)
0.18%
Top 93.2%
DATA SOURCES:
NVD 🔗 2026-08-07 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-822

> CWE DETAILED DESCRIPTIONS

CWE-822: Untrusted Pointer Dereference - The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

> HISTORIQUE DES MODIFICATIONS

Première apparition
07/08/2026 03:16
Source: NVD
📊 ENRICHISSEMENT 01/09/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-822: Untrusted Pointer Dereference - The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
Total des modifications: 1 Dernière mise à jour: 2 months ago

> REFERENCES

https://www.imaginationtech.com/gpu-driver-vulnerabilities/
« BACK_TO_HOME