164 lines
6.8 KiB
JSON
164 lines
6.8 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-74912",
|
||
"assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "imaginationtech",
|
||
"dateReserved": "2026-08-17T10:54:40.086Z",
|
||
"datePublished": "2026-10-30T02:07:31.880Z",
|
||
"dateUpdated": "2026-11-05T21:33:54.887Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
|
||
"shortName": "imaginationtech",
|
||
"dateUpdated": "2026-10-30T02:07:31.880Z"
|
||
},
|
||
"title": "GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB",
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"cweId": "CWE-823",
|
||
"description": "CWE - CWE-823: Use of Out-of-range Pointer Offset",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"impacts": [
|
||
{
|
||
"capecId": "CAPEC-679",
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "CAPEC - CAPEC-679: Exploitation of Improperly Configured or Implemented Memory Protections (Version 3.9)"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "Imagination Technologies",
|
||
"product": "Graphics DDK",
|
||
"platforms": [
|
||
"Linux",
|
||
"Android"
|
||
],
|
||
"versions": [
|
||
{
|
||
"status": "affected",
|
||
"version": "1.18 RTM2",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "23.2 RTM2",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "24.2 RTM2",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "25.1 RTM2",
|
||
"lessThanOrEqual": "25.3 RTM",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "affected",
|
||
"version": "26.1 RTM2",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"status": "unaffected",
|
||
"version": "26.2 RTM",
|
||
"versionType": "custom"
|
||
}
|
||
],
|
||
"defaultStatus": "unknown"
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.\n\nInteger truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<p>On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range.<br><br>Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and limits the functionality of the kernel mode driver.</p>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"
|
||
}
|
||
],
|
||
"source": {
|
||
"discovery": "UNKNOWN"
|
||
},
|
||
"x_generator": {
|
||
"engine": "Vulnogram 1.0.4"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"metrics": [
|
||
{
|
||
"cvssV3_1": {
|
||
"scope": "UNCHANGED",
|
||
"version": "3.1",
|
||
"baseScore": 9.8,
|
||
"attackVector": "NETWORK",
|
||
"baseSeverity": "CRITICAL",
|
||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||
"integrityImpact": "HIGH",
|
||
"userInteraction": "NONE",
|
||
"attackComplexity": "LOW",
|
||
"availabilityImpact": "HIGH",
|
||
"privilegesRequired": "NONE",
|
||
"confidentialityImpact": "HIGH"
|
||
}
|
||
},
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2026-11-05T21:33:36.324071Z",
|
||
"id": "CVE-2026-74912",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "yes"
|
||
},
|
||
{
|
||
"Technical Impact": "total"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2026-11-05T21:33:54.887Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |