CVE-2026-49747

not scored yet · published 2026-11-13

Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers. The integer overflow caused when mapping a GPU buffer >4GB causes corruption of array length, and can lead to kernel panics or out of bounds access.

Weakness: CWE-787

Source: NVD CVE-2026-49747

References

• https://www.imaginationtech.com/gpu-driver-vulnerabilities/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.