The vulnerability is an integer truncation that occurs when mapping GPU buffer pages within the 0 GB‑to‑4 GB range after the security fix for CVE‑2026‑49746 has been applied. This truncation causes an error in the driver, forcing the system to reject mapping requests outside that range, which limits the kernel mode driver’s functionality and can lead to a denial of service or degraded graphics performance.

Imagination Technologies Graphics DDK. No specific product or version details are provided beyond the vendor and the affected driver family.

The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, indicating no publicly documented exploitation. The primary risk is functional limitation rather than confidentiality or integrity compromise. Since the issue arises after applying a prior mitigation, the vulnerability itself is unlikely to be directly exploitable by attackers, but it can be abused by legitimate users or owners if buffer limits are not enforced, potentially disrupting services or causing crashes. Patch availability is not known, so the recommended posture is to monitor for vendor updates and constrain buffer sizes until a fix is released.