This vulnerability (CVE-2026-22167) in Imagination Technologies Graphics DDK involves improper restriction of operations within the bounds of a memory buffer (CWE-119). Specifically, non-privileged software can exploit GPU system calls to force the GPU to write to arbitrary physical memory pages, including those used by the kernel and other drivers. This can corrupt critical memory areas and alter system behavior. Affected versions include 1.18 RTM, 23.2 RTM, 24.1 RTM, and 25.1 RTM. The vulnerability is published but lacks a CVSS score and official remediation guidance. The vendor has not provided a patch or advisory indicating fix status.

The vulnerability allows non-privileged software to cause the GPU to write to arbitrary physical memory, potentially corrupting kernel and driver memory pages. This could lead to altered system behavior and compromise system stability or security. No known exploits have been reported in the wild, but the potential impact includes unauthorized memory corruption at a low privilege level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict untrusted software from accessing the GPU driver interfaces and monitor for updates from Imagination Technologies regarding patches or mitigations.