Out of Bounds Write Vulnerability in Guest VM GPU Software by Imagination Technologies

CVE-2026-49745

What is CVE-2026-49745?

An out of bounds write vulnerability exists in the GPU software running inside a Guest Virtual Machine (VM), possibly allowing malicious software to issue improper commands to the GPU Firmware. This flaw can lead to unauthorized writes to memory regions outside the intended scope of the Guest VM's GPU memory, posing risks of privilege escalation for attackers seeking to gain unauthorized control over the virtualized environment.

References