CVE-2026-45198
High · 7.8CVSS
7.8
EPSS
0.2%
Published
Aug 7, 2026
CISA due date
—
The record
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-83939 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker… CWE-822
- CVE-2026-83498 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave… CWE-822
- CVE-2026-80083 Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute… CWE-822
- CVE-2026-78451 Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an… CWE-822
- CVE-2026-78444 Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker… CWE-822
- CVE-2026-72956 Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized… CWE-822
- CVE-2026-10420 Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer… CWE-822
- CVE-2026-82927 Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer… CWE-822