by Kastro
Paper/Archive/CVE-2026-74912

CVE-2026-74912

Imagination Technologies Graphics DDK — GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB

EPSS 0.1%CVSS 9.8
critical.is priorityof 100
30
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 3.4.034 × 200.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.

Affected

ProductAffectedFixed inSource
Graphics DDK1.18 RTM2–CNA
Graphics DDK23.2 RTM2–CNA
Graphics DDK24.2 RTM2–CNA
Graphics DDK25.1 RTM2 – 25.3 RTM–CNA
Graphics DDK26.1 RTM226.2 RTMCNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refimaginationtech.com/gpu-driver-vulnerabilities