CVE-2026-45204

GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory

Published 7 Aug 2026 • Updated 7 Aug 2026

Severity

N/A

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions, platform instability and denial of service.

Affected products (1)

• Imagination Technologies Graphics DDK

Problem types

• CWE - CWE-476: NULL Pointer Dereference (4.15)

References (1)

• https://www.imaginationtech.com/gpu-driver-vulnerabilities/