CVE-2026-49744

Analyzed Analyzed - Analysis Complete

GPU Memory Write in Guest VM Kernel

Publication date: 2026-07-24

Last updated on: 2026-08-12

Assigner: imaginationtech

Description

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes virtualization boundaries.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-24

Last Modified

2026-08-12

Generated

2026-08-13

AI Q&A

2026-07-24

EPSS Evaluated

2026-08-12

NVD

CVE-2026-49744

EUVD

EUVD-2026-48533

Affected Vendors & Products

Vendor	Product	Version / Range
imaginationtech	ddk	26.1
imaginationtech	ddk	to 26.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-823	The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.

Attack-Flow Graph

Executive Summary

This vulnerability involves malicious software running inside a virtual machine (VM) sending incorrect commands to the GPU firmware. These commands can cause the GPU to write data outside the intended memory area of the VM, potentially leading to unauthorized access or control.

Detection Guidance

This vulnerability involves improper GPU firmware commands from a Guest VM. Detection requires monitoring GPU driver logs and firmware interactions for out-of-bounds memory writes or unauthorized commands. Check GPU driver logs for errors or warnings related to memory access violations. Use system monitoring tools to track GPU firmware interactions and detect anomalies in command sequences.

Impact Analysis

If exploited, this flaw could allow an attacker to escape the virtual machine environment and gain higher privileges on the host system. This might lead to unauthorized access to sensitive data or control over the affected system.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration from virtualized environments, which may violate data protection requirements under GDPR and HIPAA. Unauthorized privilege escalation and memory access could result in breaches of confidentiality and integrity of sensitive data.

Mitigation Strategies

Update GPU drivers and firmware to the latest versions provided by the vendor to patch the out-of-bounds access issue.

Hi! I’m here to help you understand CVE-2026-49744. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70