ASUS and Imagination Graphics Disclose Critical CVE Vulnerabilities in Enterprise Products
Sourced from 2 publications
- •ASUS Control Center Enterprise up to version 4.0.0.2 has a missing authentication vulnerability (CVE-2026-75754) exploitable remotely.
- •Imagination Graphics DDK up to version 26.1 RTM1 contains a double free vulnerability (CVE-2026-45200) triggered through improper GPU driver IOCTL calls by non-privileged users.
- •A TOCTOU flaw (CVE-2026-45197) in Imagination Graphics DDK allows Guest VM kernel software to bypass firmware validation and access data outside virtualized GPU memory.
- •All three CVEs are rated critical or very critical by reporting vulnerability databases.
Sources
CVE-2026-75754 | ASUS Control Center Enterprise up to 4.0.0.2 missing authentica...
Vuldb
CVE-2026-45200 | Imagination Graphics DDK up to 26.1 RTM1 Allocation Interface d...
Vuldb
CVE-2026-45197 | Imagination Graphics DDK up to 26.1 RTM1 GPU Firmware toctou
Vuldb
CVE-2026-45197 GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet
Vulners
CVE-2026-45200 GPU DDK - Double free in _FreeOSPages due to incorrect allocation...
Vulners
Curated from 2 sources. Every summary is reviewed for accuracy, but may still contain errors. We always link to original sources for verification.
Related Stories
About Meridian
Meridian is a free daily newsletter delivering signal-scored news stories with forward-looking analysis every morning. Stories are scored across six criteria (global leverage, capital impact, temporal durability, career relevance, decision utility, and narrative clarity) then assigned to Big Signal, Core, or Quick tiers.
Get Meridian in your inbox
The stories that matter, every morning at 06:00.