CVE-2026-45198 GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
An attacker with kernel control in the Rich Execution Environment can corrupt GPU firmware data via untrusted pointers, potentially leading to code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-45198?
CVE-2026-45198 is a high-severity memory corruption vulnerability in Imagination Technologies Graphics DDK, published on 7 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory.
The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware.
Weakness: CWE-822
Which versions are affected by CVE-2026-45198?
How do I fix CVE-2026-45198?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-45198 being exploited?
There is no known exploitation of CVE-2026-45198 in the wild and no public exploit code.
Sources
Also known as A-505471091, ASB-A-505471091, GHSA-952j-524v-rjh4.