The vulnerability is a use‑after‑free that occurs when a web page includes uncommon WebGPU content that is processed by the GPU GLES render process. The flaw can cause a write UAF crash and, on systems where the GPU process runs with system privileges, can serve as a foothold for further exploitation, potentially allowing an attacker to gain elevated privileges or execute arbitrary code in the context of the device.

Imagination Technologies Graphics DDK. No specific driver or firmware versions are listed, so any device running this DDK on affected platforms may be vulnerable.

The CVSS score is 8.1, indicating a high severity vulnerability. The EPSS score is unavailable, and the vulnerability is not listed in CISA KEV. The likely attack vector is a web page containing WebGPU content that is rendered by a GPU driver executing with elevated privileges. Without an official vendor patch, the exploit risk remains high for susceptible systems because the flaw can lead to a crash that may be leveraged for privilege escalation.