CVE-2025-46707 Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU

Description

Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.

Affected products and versions

Product	Affected versions	Fixed in
Graphics DDK	Versions not published

Other CVEs of Graphics DDK

The 95 CVEs of Graphics DDK →

CVE-2026-74915 GPU DDK - OOB write in UntwiddlePOTSquare64bpp 8.8 High CVE-2026-74912 GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB 9.8 Critical CVE-2026-19199 GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet 7.1 High CVE-2026-18629 GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation 7.5 High