CVE-2026-45199 | BDVDB-2026-363345 Detail
Imagination TechnologiesGraphics DDK
Description#
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. These can be used to escalate privileges.
Impact#
CAPEC-480: Escaping Virtualization (Version 3.9)
Weaknesses#
- CWE-823 Use of Out-of-range Pointer Offset (4.16)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.