CVE-2026-74912
Received
Received - Intake
Integer Truncation in GPU Buffer Mapping Causes Kernel Driver Errors
Vulnerability report for CVE-2026-74912, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-30
Last updated on: 2026-10-30
Assigner: imaginationtech
Description
Description
On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.
Integer truncation caused when mapping GPU buffer pages in the bufferβs range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Imagination Technologies | Graphics DDK | 1.18 RTM2 |
| Imagination Technologies | Graphics DDK | 23.2 RTM2 |
| Imagination Technologies | Graphics DDK | 24.2 RTM2 |
| Imagination Technologies | Graphics DDK | 25.1 RTM2 |
| Imagination Technologies | Graphics DDK | 26.1 RTM2 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-823 | The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer. |