Kernel software running inside a Guest VM may post improper commands to the GPU firmware, triggering a read and/or write outside the Guest’s virtualised GPU memory. The firmware uses data supplied by the Guest VM to set up memory accesses, validating this data before use. However, a TOCTOU bug allowed the earlier validation results to become invalidated, enabling the guest to perform unauthorized memory operations.

Imagination Technologies Graphics DDK – any deployment where the GPU firmware is used in a virtualised environment and a guest kernel can directly send commands to the GPU firmware. The specific firmware version affected is not listed, so all versions of the graphics DDK that expose the psFWMemContext->uiPageCatBaseRegSet functionality are potentially vulnerable.

No CVSS score is available and the EPSS score is not provided, but the vulnerability is listed as not part of the CISA KEV catalog. Based on the description, it is inferred that the guest kernel must have the ability to post commands to the GPU firmware, meaning a local‑VM kernel privilege escalation or integrity breach. Attackers with kernel‑level access inside the guest can trigger read/write beyond the expected memory region. Because the vulnerability involves a race condition that can invalidate prior validation, the exploit surface exists even without additional user interactions. The risk is considered high for systems that allow guest kernels to freely communicate with the GPU firmware without isolation controls.