CVE-2026-49746 — HIGH (7.1)

Vulnerability Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

HIGH

Related Weaknesses (CWE)

CWE-823

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

FAQ

What is CVE-2026-49746?

CVE-2026-49746 is a vulnerability with a CVSS score of 7.1 (HIGH). Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect val...

How severe is CVE-2026-49746?

CVE-2026-49746 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-49746?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.