The vulnerability is a stack buffer overflow caused by an undersized UFO address array when the driver processes resolved Linux or Android fence synchronization checkpoints. The internal copy of data writes beyond the allocated stack array, leading to illegal kernel memory writes. The resulting corruption typically crashes the kernel, causing a denial‑of‑service. The weakness follows the characteristics of Stack Buffer Overflow (CWE‑121).

Imagination Technologies Graphics DDK is the affected product. No specific version information is provided, so any releases including the Vulnerable GPU DDK code are potentially impacted.

Exploitability is likely local, requiring an attacker to run software that invokes GPU system calls as a non‑privileged user. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, so community exploitation data is limited. However, the CVSS base score, which indicates high severity, suggests that an attacker who can trigger the overflow will obtain a kernel crash, effectively denying service to the system. Given the limited public evidence, the risk remains high until a vendor patch is applied.