A non‑privileged user can exploit an integer truncation bug in the PMRDevPhysAddrOSMem routine of Imagination Technologies’ Graphics DDK to force two GPU virtual addresses to point to the same physical page. When one of those virtual mappings is freed, the physical page is released but the second mapping remains valid. If a different process subsequently allocates that page, the attacker can read from or write to memory that now belongs to another process, enabling arbitrary access to physical memory. This use‑after‑free can lead to data leakage or corruption and can potentially be used to elevate privileges or compromise system integrity.

All released builds of Imagination Technologies Graphics DDK that contain the PMRDevPhysAddrOSMem implementation are vulnerable. Because the advisory does not specify discrete build versions, any current or future build that includes this routine should be treated as at risk until a fix is deployed.

The CVSS score of 7.8 indicates a high‑severity flaw; however, the EPSS score of less than 1% suggests that exploitation is unlikely to be widespread at the moment. Exploitation requires local access by a non‑privileged user and does not involve a network component. Nevertheless, the ability to read or write any physical page that has been reallocated by another process poses a significant risk to confidentiality and integrity of system memory and could be leveraged for further attacks if the attacker can influence the victim process’s state.