SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-45201

HIGH · CVSS 7.8 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-08-21 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

Software running with non-privileged user permissions is vulnerable to improper validation of GPU system calls, specifically regarding the log2 page size during physical page allocation. This flaw can result in out-of-bounds read and write operations, potentially allowing unauthorized access to memory beyond the 4K threshold. Organizations utilizing affected software should prioritize remediation to mitigate risks associated with memory corruption and potential data breaches.

CVE
CVE-2026-45201
Severity
HIGH
CVSS
7.8
EPSS
0.12%

Original NVD Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated as higher order pages and allowing read and/or write access to the memory beyond 4K threshold.