Impact
This vulnerability is an out‑of‑bounds write on the kernel heap in the Imagination Technologies Graphics DDK. An attacker executing code as a non‑privileged user can craft certain GPU resources and supply parameters to the affected interface, causing the kernel memory to be overwritten. The primary impact is corruption of kernel data structures, which can lead to privilege escalation, arbitrary code execution, or a denial of service if the kernel becomes unstable.
Affected Systems
Affected systems include the Imagination Technologies Graphics DDK. No specific version information is provided, thus any deployment of the DDK that implements the vulnerable interface may be impacted.
Risk and Exploitability
The EPSS score is not available and the vulnerability is not listed in CISA KEV, but the CVSS score of 7.5 indicates high severity for a kernel heap out-of-bounds write. The attack surface is a non-privileged user that can invoke GPU system calls, and no specific network or local privilege escalation prerequisite is mentioned, implying that local exploitation is feasible. The potential for kernel corruption warrants high concern.
OpenCVE Enrichment