CVE-2026-45198

Name of the Vulnerable Software and Affected Versions GPU DDK (affected versions not specified)

Description Kernel software from a non-secure operating system on a platform with Trusted Execution Environment (TEE) support may cause GPU Firmware to boot using data from non-secure memory. The GPU thread of control (Firmware) utilizes a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory and main memory. An attacker with control over the REE kernel can modify the pointer value, leading to the corruption of data used by the GPU Firmware. This issue occurs within the RGXFWIF SYSINIT::sCorememDataStore function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.