CVE-2026-45195 — HIGH (7.8)

Vulnerability Description

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware for more privileged memory accesses than are permitted by the system.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Related Weaknesses (CWE)

CWE-280

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

FAQ

What is CVE-2026-45195?

CVE-2026-45195 is a vulnerability with a CVSS score of 7.8 (HIGH). Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Ad...

How severe is CVE-2026-45195?

CVE-2026-45195 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-45195?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.