CVE-2026-45203 describes a TOCTOU race condition in the Imagination Technologies Graphics DDK where kernel software inside a Host VM can send commands to GPU firmware that result in memory writes outside allowed boundaries. The vulnerability stems from a window between firmware validation and actual use, during which a malicious driver can modify memory values, bypassing intended protections. This could lead to unauthorized memory corruption or other unintended behavior in the host kernel environment.

The vulnerability allows a malicious driver to cause memory writes outside the permitted range, potentially leading to memory corruption or instability within the host kernel environment. This could undermine system integrity or cause denial of service conditions. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been published. Until a patch is available, avoid running untrusted kernel drivers within the Host VM environment that interacts with the affected Graphics DDK.