CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-49745

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. These can be used to escalate privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 1.5%

CVSS Severity

CVSS v3 Score 7.8

References

https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Products affected by CVE-2026-49745

Imaginationtech » Ddk » Version: N/A

cpe:2.3:a:imaginationtech:ddk:-
Imaginationtech » Ddk » Version: 1.15

cpe:2.3:a:imaginationtech:ddk:1.15
Imaginationtech » Ddk » Version: 1.17

cpe:2.3:a:imaginationtech:ddk:1.17
Imaginationtech » Ddk » Version: 1.18

cpe:2.3:a:imaginationtech:ddk:1.18
Imaginationtech » Ddk » Version: 23.2

cpe:2.3:a:imaginationtech:ddk:23.2
Imaginationtech » Ddk » Version: 23.3

cpe:2.3:a:imaginationtech:ddk:23.3
Imaginationtech » Ddk » Version: 24.1

cpe:2.3:a:imaginationtech:ddk:24.1
Imaginationtech » Ddk » Version: 24.2

cpe:2.3:a:imaginationtech:ddk:24.2
Imaginationtech » Ddk » Version: 24.3

cpe:2.3:a:imaginationtech:ddk:24.3
Imaginationtech » Ddk » Version: 25.1

cpe:2.3:a:imaginationtech:ddk:25.1
Imaginationtech » Ddk » Version: 25.2

cpe:2.3:a:imaginationtech:ddk:25.2
Imaginationtech » Ddk » Version: 25.3

cpe:2.3:a:imaginationtech:ddk:25.3
Imaginationtech » Ddk » Version: 26.1

cpe:2.3:a:imaginationtech:ddk:26.1
Google » Android » Version: N/A

cpe:2.3:o:google:android:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-49745

Products

Pricing

Contact Us