CVE-2026-49746
N/A
N/A
Summary
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages.
Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Imagination Technologies | Graphics DDK | 1.18 RTM2 | affected |
| Imagination Technologies | Graphics DDK | 23.2 RTM2 | affected |
| Imagination Technologies | Graphics DDK | 24.2 RTM2 | affected |
| Imagination Technologies | Graphics DDK | 25.1 RTM2 <= 25.3 RTM | affected |
| Imagination Technologies | Graphics DDK | 26.1 RTM1 | affected |
| Imagination Technologies | Graphics DDK | 26.1 RTM2 | unaffected |
Weaknesses
- CWE-823: CWE - CWE-823: Use of Out-of-range Pointer Offset (4.16)
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.