{"id":"CVE-2026-74912","aliases":["A-545799269","ASB-A-545799269","EUVD-2026-113489","GHSA-6mcm-mv2r-v5qp"],"status":"published","title":"GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers \u003e 4GB","description":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0029,"percentile":0.21826,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-823"],"published":"2026-10-30T02:07:31Z","modified":"2026-11-05T21:33:54Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2026-11-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2026-11-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"imagination technologies","product":"graphics ddk"}],"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74912"},{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities"},{"url":"https://github.com/advisories/GHSA-6mcm-mv2r-v5qp"},{"url":"https://source.android.com/security/bulletin/2026-11-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-74912","title":"GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers \u003e 4GB","description":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.","status":"published","published":"2026-10-30T02:07:31.88Z","modified":"2026-11-05T21:33:54.887Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-823"],"updated_at":"2026-11-05T22:55:20.139479Z"}],"euvd":[{"id":"EUVD-2026-113489","description":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.","status":"published","published":"2026-10-30T02:07:31Z","modified":"2026-11-05T21:33:54Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T23:02:20.394374Z"}],"ghsa":[{"id":"GHSA-6mcm-mv2r-v5qp","title":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range...","description":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.","status":"published","published":"2026-10-30T03:32:02Z","modified":"2026-11-06T00:32:41Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-823"],"updated_at":"2026-11-06T00:57:25.690752Z"}],"nvd":[{"id":"CVE-2026-74912","description":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.","status":"published","published":"2026-10-30T02:17:09.727Z","modified":"2026-11-05T22:18:53.923Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-823"],"updated_at":"2026-11-05T23:57:22.627849Z"}],"osv":[{"id":"ASB-A-545799269","status":"published","published":"2026-11-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:07.907985Z"}]}}