CVE-2026-74912
Received Received - Intake

Integer Truncation in GPU Buffer Mapping Causes Kernel Driver Errors

Vulnerability report for CVE-2026-74912, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: imaginationtech

Description

On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
EUVD

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-823 The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects GPU systems with a security fix for CVE-2026-49746 applied. It limits the mapping range of graphics buffers, causing errors when accessing memory outside the restricted range. Integer truncation occurs when mapping GPU buffer pages within 0GB to 4GB, leading to errors and reduced functionality of the kernel mode driver.

Impact Analysis

The vulnerability can cause system instability or crashes when GPU operations attempt to access memory outside the limited mapping range. Applications relying on GPU acceleration may fail or exhibit reduced performance, potentially disrupting graphics-intensive tasks.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it relates to GPU buffer mapping errors in kernel mode drivers. No evidence suggests it impacts data protection or privacy requirements.

Mitigation Strategies

Apply the latest security patches or updates from Imagination Technologies for the Graphics DDK to address the integer truncation issue in GPU buffer mapping.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74912. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart