https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T07:43:48.776961+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-45199 CVE-2026-45199 — GPU DDK - rgxfw_to_ptr() does not reject FW private data pointers 2026-10-08T07:43:48.797231+00:00

Affected: Imagination Technologies Graphics DDK

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory.

Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. These can be used to escalate privileges.