CVE-2026-49744 | BDVDB-2026-352273 Detail
Imagination TechnologiesGraphics DDK
Description#
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes virtualization boundaries.
Impact#
CAPEC - CAPEC-480: Escaping Virtualization (Version 3.9)
Weaknesses#
- CWE-823 CWE - CWE-823: Use of Out-of-range Pointer Offset (4.16)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.