This vulnerability involves an integer overflow (CWE-190) in the Imagination Technologies Graphics DDK when computing physical offsets for sparse PMRs exceeding 4 GB. The overflow results in 32-bit truncation of address calculations, which may cause the GPU Memory Management Unit (MMU) to map incorrect physical memory regions. Consequently, a non-privileged user could exploit this to gain unauthorized access to physical memory, leading to memory corruption or information disclosure. The CVSS 3.1 base score is 9.8, indicating critical severity. There is no vendor advisory or patch information available at this time.

An attacker without privileges can exploit this integer overflow to cause incorrect GPU MMU mappings, potentially accessing physical memory regions they should not. This can result in memory corruption or unauthorized disclosure of sensitive information. The vulnerability affects confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific mitigations or workarounds are documented at this time.