Out‑of‑bounds reads arise from an incorrect validation of array indices in the PMRDevPhysAddrOSMem routine within Imagination Technologies’ Graphics DDK. Because the driver accepts user‑supplied indices beyond the bounds of the allocated array, a kernel pointer is dereferenced, resulting in a kernel memory read. In certain conditions the bug also leads to an uninitialised address in the GPU memory manager (UAF). Consequently, a local non‑privileged user can extract confidential kernel data and potentially exploit the UAF to execute arbitrary code with kernel privileges. This issue is identified as a memory management flaw (CWE‑823).

The affected software is the Imagination Technologies Graphics DDK used for GPU management. No specific version range is reported in the CVE data, so all builds of this DDK that include the PMRDevPhysAddrOSMem routine may be vulnerable unless they have been updated after the vendor issued a patch.

Exploitability is high because the vulnerability can be triggered by any user who has the ability to execute GPU system calls with the driver. The likely attack vector is a local, non‑privileged user sending malformed commands to the GPU. The EPSS score of 0.00139 indicates a very low likelihood of exploitation, but the issue is still not cataloged in CISA KEV. The CVSS score is 7.1, indicating medium to high severity.