7.8
High
CVE-2026-45200 Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an…
Description
Software installed and run as a non-privileged user may conduct improper GPU driver IOCTL calls to create an allocation scenario that when freed would cause double free and kernel heap corruption. Scenario caused by fabricating a specific combination of flags on the allocation interface that would cause an incorrect double free event when freed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Graphics DDK | Versions not published |
Other CVEs of Graphics DDK
The 95 CVEs of Graphics DDK →
CVE-2026-74915
GPU DDK - OOB write in UntwiddlePOTSquare64bpp
8.8
High
CVE-2026-74912
GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB
9.8
Critical
CVE-2026-19199
GPU DDK - OOB write due to freelist size integer overflow in RGXCreateHWRTDataSet
7.1
High
CVE-2026-18629
GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation
7.5
High