CVE-2026-49746CWE-823

CVE-2026-49746

High · published August 7, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages.

Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-823 · Use of Out-of-range Pointer Offset
Published
2026-08-07T07:16Z
References (1)
https://www.imaginationtech.com/gpu-driver-vulnerabilities/ · 367425dc-4d06-4041-9650-c2dc6aaa27ce
EPSS history
Timeline
  • 07 AUG 01:59Z
    GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem
    cvelistv5