An integer overflow occurs during WebGPU shader compilation inside the libusc.so component of Imagination Technologies Graphics DDK. The overflow causes an incorrect memory size calculation, leading to a memory allocation failure. When the failure is not handled, the compiler dereferences a NULL pointer, crashing the compiler process. If that process runs with system privileges, the crash or subsequent error state could enable further exploitation on the device.

The flaw resides in Imagination Technologies Graphics DDK, specifically in the libusc.so library that handles WebGPU shader compilation. No specific version information is supplied, so all releases that include this component are potentially affected.

The CVSS score is not listed, and EPSS is unavailable, so the exploitation likelihood cannot be quantified. Because the vulnerability arises when a web page supplies shader code that is compiled by the GPU driver, an attacker who can influence that content (e.g., a malicious web page viewed by a user) could trigger the overflow. The compiler is typically a privileged process; thus, a successful crash may provide a foothold for further exploitation, though no direct remote code execution has been documented.