CVE Watch7 ago 2026

CVE-2026-45198

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot

CVSS

7.8

Alto

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 7 ago 2026 · Última mod.: 7 ago 2026 · CWE-822

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware.

Referencias oficiales

www.imaginationtech.comhttps://www.imaginationtech.com/gpu-driver-vulnerabilities/

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-74067.8 ALT

—

——0A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.12h CVE-2026-19023—

1.9%

——1Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes subsequent elements to be read from a misaligned offset and dereferenced as a pointer.1d CVE-2026-240837.8 ALT

1.5%

——0Memory Corruption while processing IOCTL device driver requests with invalid arguments.2d CVE-2026-15029—

3.4%

——1Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.24d CVE-2026-483407.8 ALT

6.6%

——2Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.23d CVE-2026-551385.5 MED

27.1%

——8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.24d