Time-of-check Time-of-use (TOCTOU) Race Condition in PowerVR GPU DDK - CVE-2026-45197
Published: September 9, 2026
Vulnerability identifier: #VU148434
CSH Severity: Low
CVSS v4: 8.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-45197
CWE-ID: CWE-367
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to read or write data outside the guest\'s virtualized GPU memory.
The vulnerability exists due to a time-of-check to time-of-use race condition in psFWMemContext->uiPageCatBaseRegSet when processing commands sent to the GPU firmware by kernel software running inside a guest VM. A local privileged user can post improper commands to the GPU firmware to read or write data outside the guest\'s virtualized GPU memory.
Affected software
PowerVR GPU DDK
How to mitigate CVE-2026-45197
Install security update from vendor's website.
PowerVR GPU DDK - update to 26.1 RTM2