CVE-2026-49747

A vulnerability exists in the GPU DDK where software running as a non-privileged user can perform GPU system calls to trigger an integer overflow . This occurs when mapping a GPU buffer larger than 4GB , specifically involving the PVRDmaBufOpsMapCommon function. The resulting overflow causes corr...

CVE-2026-49747 GPU DDK - OOB write for mappings larger than 4GB due to integer overflow in PVRDmaBufOpsMapCommon

Software installed and run as a non-privileged user may conduct GPU system calls to trigger an integer overflow and allow OOB writes to GPU buffers. The integer overflow caused when mapping a GPU buffer 4GB causes corruption of array length, and can lead to kernel panics or out of bounds access...