CVE-2026-49746

Name of the Vulnerable Software and Affected Versions GPU DDK (affected versions not specified)

Description Software run by a non-privileged user can perform improper GPU system calls to trigger out-of-bounds (OOB) read access to kernel memory. This occurs due to incorrect validation of an array index within the PMRDevPhysAddrOSMem function, which can also lead to a Use-After-Free (UAF) condition of arbitrary GPU pages. OOB read refers to reading data outside the intended boundary of a buffer, while UAF is a condition where a program continues to use a pointer after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.