A non-privileged user can invoke special GPU sparse memory API calls that trigger an out‑of‑bounds write in the kernel heap when the Graphics DDK incorrectly translates virtual page indexes into physical page translations. This kernel heap corruption can allow an attacker to overwrite sensitive control data, potentially leading to privilege escalation or denial of service.

The vulnerability affects Imagination Technologies Graphics DDK. No specific version information is provided in the available data.

The CVSS score is not present, and the EPSS score is unavailable, but the nature of the flaw – an OOB kernel write – indicates high severity. Because the flaw is triggered by an API usable by any user on the system, the attack vector is local. No exploitation evidence or KEV listing is reported. With the risk of privilege escalation and system instability, a conservative assessment would consider this a high‑risk vulnerability for affected installations.