An out‑of‑bounds write occurs in the libusc component of the Imagination Technologies Graphics DDK during the ConvertSwitchToArrayLookupBP routine for WebGPU shader compilation. The write corrupts memory, causing a segmentation fault, and on systems where the compiler process runs with system privileges this defect could be leveraged to elevate privileges or execute arbitrary code. The CVSS score of 9.6 reflects a high‑severity risk to confidentiality, integrity, and availability.

The vulnerability affects the entire Imagination Technologies Graphics DDK across all platforms that use its GPU shader compiler. No specific version details are listed, so any device running this DDK is potentially exposed, particularly where the compiler process may possess system‑level rights.

The EPSS score of less than 1 % indicates that exploitation is currently considered unlikely, and the issue is not listed in CISA’s KEV catalog. The likely attack vector is inferred to be a malicious web page that includes unusually large switch statements in GPU shader code, which the compiler processes when the page is rendered. While the immediate effect is a crash, the out‑of‑bounds write could enable privilege escalation if the compiler has elevated permissions, elevating the threat to remote code execution.