The vulnerability allows a malicious actor to manipulate secure memory allocations within the Imagination Technologies GPU kernel module, enabling data to be moved between isolated GPU processes or causing image corruption. This results in both confidentiality exposure of sensitive payloads processed by secure GPU applications and integrity/availability issues for those processes. The weakness is a type of insecure resource allocation identified as CWE-653.

Imagination Technologies Graphics DDK is affected. No specific version information is provided, so all installations of the driver should be considered potentially vulnerable.

The exploit requires control over secure GPU processes or the ability to create such processes and invoke shared secure memory allocations. While no exploit score or KEV status is listed, the absence of an EPSS score suggests limited public exploitation data. Nevertheless, an attacker with local or privileged GPU access could potentially leak data or disrupt other secure GPU workloads, warranting proactive mitigation.