Vulnerability Description
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes virtualization boundaries.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Imaginationtech | Ddk | < 26.1 |
| Android | - | |
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- https://www.imaginationtech.com/gpu-driver-vulnerabilities/Vendor Advisory
FAQ
What is CVE-2026-49744?
CVE-2026-49744 is a vulnerability with a CVSS score of 7.8 (HIGH). Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses ...
How severe is CVE-2026-49744?
CVE-2026-49744 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-49744?
Check the references section above for vendor advisories and patch information. Affected products include: Imaginationtech Ddk, Google Android, Linux Linux Kernel.