{"api_version":"1","generated_at":"2026-11-04T11:44:51+00:00","cve":"CVE-2026-74912","urls":{"html":"https://cve.report/CVE-2026-74912","api":"https://cve.report/api/cve/CVE-2026-74912.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-74912","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-74912"},"summary":{"title":"GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB","description":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.","state":"PUBLISHED","assigner":"imaginationtech","published_at":"2026-10-30 02:17:09","updated_at":"2026-10-30 19:39:14"},"problem_types":["CWE-823","CWE-823 CWE - CWE-823: Use of Out-of-range Pointer Offset"],"metrics":[],"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/","name":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/","refsource":"367425dc-4d06-4041-9650-c2dc6aaa27ce","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74912","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74912","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Imagination Technologies","product":"Graphics DDK","version":"affected 1.18 RTM2 custom","platforms":["Linux","Android"]},{"source":"CNA","vendor":"Imagination Technologies","product":"Graphics DDK","version":"affected 23.2 RTM2 custom","platforms":["Linux","Android"]},{"source":"CNA","vendor":"Imagination Technologies","product":"Graphics DDK","version":"affected 24.2 RTM2 custom","platforms":["Linux","Android"]},{"source":"CNA","vendor":"Imagination Technologies","product":"Graphics DDK","version":"affected 25.1 RTM2 25.3 RTM custom","platforms":["Linux","Android"]},{"source":"CNA","vendor":"Imagination Technologies","product":"Graphics DDK","version":"affected 26.1 RTM2 custom","platforms":["Linux","Android"]},{"source":"CNA","vendor":"Imagination Technologies","product":"Graphics DDK","version":"unaffected 26.2 RTM custom","platforms":["Linux","Android"]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"74912","cve":"CVE-2026-74912","epss":"0.001400000","percentile":"0.033060000","score_date":"2026-11-02","updated_at":"2026-11-03 00:03:08"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unknown","platforms":["Linux","Android"],"product":"Graphics DDK","vendor":"Imagination Technologies","versions":[{"status":"affected","version":"1.18 RTM2","versionType":"custom"},{"status":"affected","version":"23.2 RTM2","versionType":"custom"},{"status":"affected","version":"24.2 RTM2","versionType":"custom"},{"lessThanOrEqual":"25.3 RTM","status":"affected","version":"25.1 RTM2","versionType":"custom"},{"status":"affected","version":"26.1 RTM2","versionType":"custom"},{"status":"unaffected","version":"26.2 RTM","versionType":"custom"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.<br><br>Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.</p>"}],"value":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver."}],"impacts":[{"capecId":"CAPEC-679","descriptions":[{"lang":"en","value":"CAPEC - CAPEC-679: Exploitation of Improperly Configured or Implemented Memory Protections (Version 3.9)"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-823","description":"CWE - CWE-823: Use of Out-of-range Pointer Offset","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-30T02:07:31.880Z","orgId":"367425dc-4d06-4041-9650-c2dc6aaa27ce","shortName":"imaginationtech"},"references":[{"url":"https://www.imaginationtech.com/gpu-driver-vulnerabilities/"}],"source":{"discovery":"UNKNOWN"},"title":"GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB","x_generator":{"engine":"Vulnogram 1.0.4"}}},"cveMetadata":{"assignerOrgId":"367425dc-4d06-4041-9650-c2dc6aaa27ce","assignerShortName":"imaginationtech","cveId":"CVE-2026-74912","datePublished":"2026-10-30T02:07:31.880Z","dateReserved":"2026-08-17T10:54:40.086Z","dateUpdated":"2026-10-30T02:07:31.880Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-30 02:17:09","lastModifiedDate":"2026-10-30 19:39:14","problem_types":["CWE-823","CWE-823 CWE - CWE-823: Use of Out-of-range Pointer Offset"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"74912","Ordinal":"1","Title":"GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphic","CVE":"CVE-2026-74912","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"74912","Ordinal":"1","NoteData":"On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.","Type":"Description","Title":"GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphic"}]}}}