Home

Description

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privilege escalation.

PUBLISHED Reserved 2026-05-11 | Published 2026-07-10 | Updated 2026-07-13 | Assigner imaginationtech

Problem types

CWE-280: Improper Handling of Insufficient Permissions or Privileges (4.15)

Product status

Default status
unknown

1.18 RTM2 (custom)
affected

23.2 RTM2 (custom)
affected

24.2 RTM2 (custom)
affected

25.1 RTM2 (custom)
affected

26.1 RTM1 (custom)
affected

26.1 RTM2 (custom)
unaffected

References

www.imaginationtech.com/gpu-driver-vulnerabilities/

cve.org (CVE-2026-45196)

nvd.nist.gov (CVE-2026-45196)

Download JSON