CVE-2026-49746 GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages...

CVE-2026-49746

CVE-2026-49746 describes a GPU-driver vulnerability where software run as a non-privileged user can issue improper GPU system calls, causing out-of-bounds (OOB) kernel memory reads and, in some cases, GPU use-after-free (UAF) of arbitrary pages. The root cause is described as an incorrect validat...