This vulnerability (CVE-2026-34195) in Imagination Technologies Graphics DDK involves an out-of-bounds write in kernel memory triggered by non-privileged users through GPU sparse memory API calls. The root cause is improper indexing of internal state during sparse allocation remapping, which allows memory corruption. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges of a non-privileged user, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows a non-privileged user to perform out-of-bounds writes in kernel memory, potentially leading to system compromise, including unauthorized data access, modification, or denial of service. The vulnerability affects the kernel's memory integrity and stability due to improper handling of GPU sparse memory operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been published by Imagination Technologies at this time. Users should monitor vendor communications for updates and apply patches promptly once available.