{"affected":[{"defaultStatus":"unknown","platforms":["Linux","Android"],"product":"Graphics DDK","source":"CNA: imaginationtech","vendor":"Imagination Technologies","versions":[{"status":"unaffected","version":"1.18 RTM2","versionType":"custom"},{"status":"unaffected","version":"23.2 RTM2","versionType":"custom"},{"status":"affected","version":"24.2 RTM2","versionType":"custom"},{"status":"affected","version":"25.1 RTM2","versionType":"custom"},{"status":"affected","version":"25.3 RTM","versionType":"custom"},{"status":"affected","version":"26.1 RTM2","versionType":"custom"},{"status":"affected","version":"26.2 RTM"},{"status":"unaffected","version":"26.3 RTM"}]}],"cveId":"CVE-2026-49747","cwes":["CWE-787"],"description":"Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers.\n\n\n\nThe integer overflow caused when mapping a GPU buffer >4GB causes corruption of array length, and can lead to kernel panics or out of bounds access.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794536130247,"publishedAt":1794536130247,"references":[{"source":"CNA: imaginationtech","tags":[],"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}],"remediation":[],"revision":"422dfbccaa89af17f6ce46e27ccf910c412c92c3e59413e38fede6a70e21fb90","sources":[{"modifiedAt":1794536130247,"name":"CNA: imaginationtech","retrievedAt":1794539345316,"url":"https://www.cve.org/CVERecord?id=CVE-2026-49747"}],"ssvc":null,"status":"published","title":"GPU DDK - OOB write for mappings larger than 4GB due to integer overflow in PVRDmaBufOpsMapCommon","updatedAt":1794539345316}