What is GHSA-xxq2-97gh-5p37?

GHSA-xxq2-97gh-5p37 is a security advisory published by GitHub Security Advisories with High severity. Software installed and run as a non-privileged user may conduct improper GPU system calls to...

Which CVE IDs does GHSA-xxq2-97gh-5p37 cover?

GHSA-xxq2-97gh-5p37 covers the following CVE IDs: CVE-2026-49746. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xxq2-97gh-5p37?

GHSA-xxq2-97gh-5p37 has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-xxq2-97gh-5p37HighCVSS 7.1

Software installed and run as a non-privileged user may conduct improper GPU system calls to...

Vendor

GitHub Security Advisories

Published

August 7, 2026

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-49746 →

📋 Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages.

Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-49746
https://www.imaginationtech.com/gpu-driver-vulnerabilities
https://github.com/advisories/GHSA-xxq2-97gh-5p37