Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. These can be used to escalate privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 3 products
CVE-2026-49745 Out-of-Bounds Memory Write in Guest VM GPU Firmware Command Processing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49745
Post summary
The text announces CVE‑2026‑49745 as an out‑of‑bounds memory write vulnerability in guest VM GPU firmware command processing, without further details on exploitation or mitigation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - | |
| App | imaginationtech | ddk | - | - | - |
| App | imaginationtech | ddk | 26.1 | - | - |
| OS | linux | linux_kernel | - | - | - |