This vulnerability involves improper GPU system calls by software running as a non-privileged user, which cause an integer overflow and result in two GPU virtual addresses mapping to the same physical address. When one virtual mapping is freed along with the physical page, the second virtual mapping still references the now-freed physical memory. This use-after-free condition allows read and write access to memory that may be reallocated by other processes, potentially leading to serious security consequences.

The vulnerability allows a local attacker with non-privileged access to perform read and write operations on freed physical memory, which can compromise confidentiality, integrity, and availability of the system. The CVSS score of 7.8 reflects a high severity with local attack vector, low attack complexity, and no user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published by Imagination Technologies at this time.