CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-49744

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes virtualization boundaries.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 1.5%

CVSS Severity

CVSS v3 Score 7.8

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Products affected by CVE-2026-49744

Imaginationtech » Ddk » Version: N/A

cpe:2.3:a:imaginationtech:ddk:-
Imaginationtech » Ddk » Version: 1.15

cpe:2.3:a:imaginationtech:ddk:1.15
Imaginationtech » Ddk » Version: 1.17

cpe:2.3:a:imaginationtech:ddk:1.17
Imaginationtech » Ddk » Version: 1.18

cpe:2.3:a:imaginationtech:ddk:1.18
Imaginationtech » Ddk » Version: 23.2

cpe:2.3:a:imaginationtech:ddk:23.2
Imaginationtech » Ddk » Version: 23.3

cpe:2.3:a:imaginationtech:ddk:23.3
Imaginationtech » Ddk » Version: 24.1

cpe:2.3:a:imaginationtech:ddk:24.1
Imaginationtech » Ddk » Version: 24.2

cpe:2.3:a:imaginationtech:ddk:24.2
Imaginationtech » Ddk » Version: 24.3

cpe:2.3:a:imaginationtech:ddk:24.3
Imaginationtech » Ddk » Version: 25.1

cpe:2.3:a:imaginationtech:ddk:25.1
Imaginationtech » Ddk » Version: 25.2

cpe:2.3:a:imaginationtech:ddk:25.2
Imaginationtech » Ddk » Version: 25.3

cpe:2.3:a:imaginationtech:ddk:25.3
Imaginationtech » Ddk » Version: 26.1

cpe:2.3:a:imaginationtech:ddk:26.1
Google » Android » Version: N/A

cpe:2.3:o:google:android:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-49744

Products

Pricing

Contact Us