CVE-2026-49746

GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem

Published 7 Aug 2026 • Updated 7 Aug 2026

Severity

N/A

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.

Affected products (1)

• Imagination Technologies Graphics DDK

Problem types

• CWE - CWE-823: Use of Out-of-range Pointer Offset (4.16)

References (1)

• https://www.imaginationtech.com/gpu-driver-vulnerabilities/