This vulnerability involves a use-after-free (CWE-416) condition in the GPU GLES user-space shared library of Imagination Technologies Graphics DDK. It is triggered by loading a web page containing unusual WebGPU content into the GPU GLES render process, causing a write use-after-free crash. The affected product versions include 1.18 RTM, 23.2 RTM, 24.1 RTM, and 25.1 RTM. The vulnerability could lead to further exploitation on devices where the graphics workload process runs with system privileges. The CVSS score is not provided, and no patch or remediation level has been disclosed by the vendor as of the publication date.

The vulnerability can cause a write use-after-free crash in the GPU GLES user-space shared library, potentially leading to further exploits on affected devices if the graphics workload process has system privileges. This could compromise device stability and security by enabling escalation of privileges or arbitrary code execution under certain conditions. However, no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published, users should monitor vendor communications for updates. Until a patch is available, limiting the execution of untrusted WebGPU content or restricting privileges of the graphics workload process may reduce risk, but no vendor-endorsed mitigations are currently documented.