This vulnerability allows an out‑of‑bounds read or write when the GPU GLES render process handles WebGPU content that contains unusually crafted data. The flaw can cause the shared library to crash and, under certain circumstances where the graphics workload runs with system privileges, may enable further exploitation. As a CWE‑823 defect, the memory corruption may be abused to alter program behavior or elevate privileges.

Devices that use Imagination Technologies Graphics DDK expose this weakness. The CNA does not publish affected version ranges, so any release that contains the vulnerable UntwiddlePOTSquare64bpp routine remains potentially impacted until a vendor patch is issued.

The CVSS score is not provided and EPSS data is unavailable, making the current exploitation probability unclear. The vulnerability is not listed in CISA's KEV catalog, suggesting no publicly known exploits. Nevertheless, because the flaw can lead to privilege escalation when the driver runs with system privileges, the risk to affected systems is significant in environments that run GPU workloads with elevated rights.