CVE-2026-49744

Name of the Vulnerable Software and Affected Versions GPU DDK (affected versions not specified)

Description Kernel software running within a Guest VM can send improper commands to the GPU Firmware, causing data to be written outside the virtualized GPU memory. This out-of-bounds access, which can be triggered by malware in a Guest KMD (Kernel Mode Driver), may lead to privilege escalation and a virtualization boundary escape. The issue involves an unchecked ui32TracePointer within the rgxfw log ex() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.