CVE-2026-49746 GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages...

CVE-2026-49746

The CVE-2026-49746 entry refers to a dimension mismatch and integer truncation in PMRDevPhysAddrOSMem within the GPU DDK. The issue arises when a non-privileged user triggers improper GPU system calls, leading to out-of-bounds (OOB) reads of kernel memory and, in some cases, use-after-free (UAF) ...