A logic error in the address translation function rgxfw_to_ptr() within the GPU DDK allows a compromised kernel running on a host or guest VM to send malformed commands to the GPU firmware, resulting in arbitrary writes to firmware memory. Based on the description, it is inferred that the flaw originates from insufficient pointer validation and could enable an attacker to overwrite firmware code or data, potentially leading to arbitrary code execution or privilege escalation on the host or guest system.

Vendors affected are Imagination Technologies Graphics DDK. Specific product or version information is not specified in the data, so any installation of the Graphics DDK that includes rgxfw_to_ptr() is potentially vulnerable. Based on the description, it is inferred that the lack of version specifics means all such installations are at risk.

Based on the description, it is inferred that the exploit requires the attacker to control or compromise kernel-level code on the host or guest VM. The CVSS score of 4.3 indicates a medium severity but the flaw allows arbitrary firmware memory writes, which could be leveraged for privilege escalation. The vulnerability is not listed in the CISA KEV catalog, indicating that known public exploits are not yet confirmed, but the lack of mitigation or patch information implies a high likelihood of exploitation if the flaw remains unpatched.