This vulnerability arises in the Imagination Technologies Graphics DDK. A non‑privileged user can issue improper GPU system calls that cause the GPU to write to arbitrary physical memory addresses. This can corrupt data that was not allocated by the GPU driver, potentially affecting kernel or driver memory. The primary impact is arbitrary memory corruption, which can lead to privilege escalation or denial of service, identified as a buffer overrun (CWE‑119).

Affected are installations of the Imagination Technologies Graphics DDK running on platforms that support the GPU DDK. No specific version numbers are listed in the CNA data.

The CVSS score of 7.8 indicates high severity of arbitrary writes to physical memory. The EPSS score is unavailable, indicating that publicly available exploitation data is lacking. The vendor does not include the CVE in the CISA KEV catalog. Attackers would need to execute the exploit from a non‑privileged user context and cause the GPU to reference disallowed memory via system calls, a path that requires that the GPU driver improperly validates buffers. This indicates potential remote code execution or kernel compromise if the written data modifies kernel or driver behavior.