← CVE Intelligence

CVE-2026-45201

GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory PUBLISHED

Description (CNA)

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated as higher order pages and allowing read and/or write access to the memory beyond 4K threshold.

Affected (CNA)

Vendor / productVersions
Imagination Technologies / Graphics DDKunaffected 1.18 RTM2; unaffected 23.2 RTM2; affected 24.2 RTM2; affected 25.1 RTM2 through 25.3 RTM; affected 26.1 RTM1; unaffected 26.1 RTM2

CWE

CWE-1284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.