CVE-2026-49747
GPU DDK - OOB write for mappings larger than 4GB due to integer overflow in PVRDmaBufOpsMapCommon
Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers.
The integer overflow caused when mapping a GPU buffer >4GB causes corruption of array length, and can lead to kernel panics or out of bounds access.
What each source reports
CVE ListNo score
GPU DDK - OOB write for mappings larger than 4GB due to integer overflow in PVRDmaBufOpsMapCommon
Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers.
The integer overflow caused when mapping a GPU buffer >4GB causes corruption of array length, and can lead to kernel panics or out of bounds access.
- Record
CVE-2026-49747- Weakness
- CWE-787
- Updated
- 2026-11-13
EUVDEUVD-2026-124826No score
Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers.
The integer overflow caused when mapping a GPU buffer >4GB causes corruption of array length, and can lead to kernel panics or out of bounds access.
- Record
EUVD-2026-124826- Updated
- 2026-11-13
GitHub AdvisoriesGHSA-7g2r-v52q-532gNo score
Software installed and run as a non-privileged user may conduct GPU system calls to trigger an...
Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers.
The integer overflow caused when mapping a GPU buffer >4GB causes corruption of array length, and can lead to kernel panics or out of bounds access.
- Record
GHSA-7g2r-v52q-532g- Weakness
- CWE-787
- Updated
- 2026-11-13
NVDNo score
Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers.
The integer overflow caused when mapping a GPU buffer >4GB causes corruption of array length, and can lead to kernel panics or out of bounds access.
- Record
CVE-2026-49747- Weakness
- CWE-787
- Updated
- 2026-11-13
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| published | EUVD | |
| published | EUVD | |
| title | CVE List | |
| aliases, cwes, references, title | GitHub Advisories | |
| first indexed | EUVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-49747 is a vulnerability with no CVSS score yet in Imagination Technologies Graphics Ddk, published November 13, 2026. No source lists public exploit code. No source names a fixed version.