Skip to content
OpenAdvisories
High · 7.1 CVE-2026-49746 EUVD-2026-54348GHSA-xxq2-97gh-5p37

GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem

Published Aug 7, 2026 · Updated Aug 7, 2026 · Assigned by imaginationtech

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages.

Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.

Affected products

VendorProductAffectedFixed
Imagination Technologies Graphics DDK 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.1 RTM2 – ≤ 25.3 RTM, 26.1 RTM1 26.1 RTM2

Advisories 1

References