CVE-2026-49744 Details
Description
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes virtualization boundaries.
A vulnerability exists in the GPU driver component of Imagination Technologies, specifically in the Graphics Processing Unit (GPU) Device Driver Kit) DDK) releases up to and including 26.1 RTM1. This vulnerability allows kernel software running inside a Guest Virtual Machine (VM) to send improper commands to the GPU firmware, causing data to be written outside the Guest's virtualized GPU memory. Such out-of-bounds accesses, potentially exploited by malware introduced to a Guest Kernel Mode Driver (KMD), could lead to privilege escalation by escaping virtualization boundaries.
Users are advised to update to the latest version of the Imagination Technologies GPU Driver that addresses this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 24, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.imaginationtech.com/gpu-driver-vulnerabilities/ | imaginationtech | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-823 | Use of Out-of-range Pointer Offset | imaginationtech |
Affected Products
| Product | Versions |
|---|---|
| imaginationtech ddk | < 26.1 26.1 rtm1 |
CPE
Remediation
| |
| google android | All versions |
CPE
Remediation
| |
| linux linux kernel | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 12, 2026 | Initial Analysis | [email protected] |
| Jul 24, 2026 | CVE Modified | CISA-ADP |
| Jul 24, 2026 | New CVE Received | imaginationtech |