high7.8
CVE-2026-45203
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of …
Impact
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel. A TOCTOU bug existed where a malicious driver could modify values in memory after firmware validation but before use.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imaginationtech | Ddk | before 26.1 Version 26.1 |