CVE-2026-74912 Details
Description
On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.
A vulnerability exists in the GPU driver from Imagination Technologies, specifically in the Graphics Processing Unit (GPU) Device Driver Kit (DDK) releases up to and including 26.1 RTM1. This vulnerability arises from an integer truncation issue when mapping GPU buffer pages, which can lead to out-of-bounds memory access and a use-after-free condition. The problem is particularly pronounced on systems with a 32-bit host CPU, where improper validation of page sizes can cause the GPU to overwrite read-only shared memory, such as libc.so, or to manipulate physical memory in ways that disrupt kernel operations.
Users can update to the latest version of the Imagination Technologies GPU driver, which addresses the vulnerability by improving the validation of page sizes and preventing improper memory mappings that could be exploited.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 30, 2026CISA-ADP
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.imaginationtech.com/gpu-driver-vulnerabilities/ | imaginationtech | AdvisoryBundleVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-823 | Use of Out-of-range Pointer Offset | imaginationtech |
Affected Products
| Product | Versions |
|---|---|
| Imagination Technologies GPU DDK | <= 26.1 RTM1 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | CVE Modified | CISA-ADP |
| Oct 30, 2026 | New CVE Received | imaginationtech |