CVE-2026-45201 PUBLISHED

GPU DDK - Incorrect page size validation in PhysmemNewRamBackedPMR could lead to OOB read and/or write of arbitrary physical memory

Assigner: imaginationtech
Reserved: 11.05.2026 Published: 21.08.2026 Updated: 21.08.2026

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value.

Such crafted log2 page size could lead to 4K pages being treated as higher order pages and allowing read and/or write access to the memory beyond 4K threshold.

Product Status

Vendor Imagination Technologies
Product Graphics DDK
Versions Default: unknown
  • Version 1.18 RTM2 is unaffected
  • Version 23.2 RTM2 is unaffected
  • Version 24.2 RTM2 is affected
  • affected from 25.1 RTM2 to 25.3 RTM (incl.)
  • Version 26.1 RTM1 is affected
  • Version 26.1 RTM2 is unaffected

References

Problem Types

  • CWE-1284: Improper Validation of Specified Quantity in Input CWE

Impacts

  • CAPEC-47: Buffer Overflow via Parameter Expansion