Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2026-45198

GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted

High7.8EPSS 0.18%
Published
Updated
Reserved
Assigned by
imaginationtech

Description

Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware.

Scores

CVSS scores of CVE-2026-45198, by who scored it
Scored byCVSSScoreVector
CISA-ADPADP (enrichment)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Deferred3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.18% · top 93% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

Affected products

  • Imagination Technologies · Graphics DDK

    • affected 1.17 RTM2
    • affected 1.18 RTM2
    • affected 23.2 RTM2
    • affected 24.2 RTM2
    • affected 25.1 RTM2 – ≤ 25.3 RTM
    • affected 26.1 RTM1
    • unaffected 26.1 RTM2

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-45198 badge
[![CVE-2026-45198](https://trackcve.app/badge/CVE-2026-45198.svg)](https://trackcve.app/cve/CVE-2026-45198)

Record last updated .