PT-2026-45409 · Imagination Technologies · Graphics Ddk

Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-34193

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A logic error in the address translation allows kernel software running inside a Guest or Host VM to post improper commands to the GPU Firmware. This can trigger a write of data outside the intended GPU memory, enabling a compromised Host Kernel to perform arbitrary writes to firmware memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-823

Related Identifiers

CVE-2026-34193

Affected Products

Graphics Ddk

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-34193 · Security Note
• https://twitter.com/VulmonFeeds/status/2061449836382023716 · Twitter Post
• https://imaginationtech.com/gpu-driver-vulnerabilities · Note