CVE-2026-45197

2.5 Faible

Publiée le 04/09/2026 à 04:17 · Modifiée le 08/09/2026 à 17:28 · En attente d'analyse NVD · Source : 367425dc-4d06-4041-9650-c2dc6aaa27ce

Description

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a TOCTOU bug was present which allowed the earlier check results to be invalidated.

Traduire en français

Produits concernés

Imagination Technologies Graphics DDK

Scores CVSS

Version	Score	Source	Vecteur
3.1	2.5 Faible	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-367

Références

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories