This vulnerability involves a use-after-free condition (CWE-416) in the Imagination Technologies Graphics DDK. Improper GPU system calls by a non-privileged user cause an integer overflow that results in two GPU virtual addresses mapping to the same physical address. When one virtual mapping is freed along with the physical page, the second virtual mapping still references the freed physical memory. This allows an attacker to read and write to physical memory that may have been reallocated to another process, potentially leading to unauthorized memory access.

The vulnerability allows a non-privileged user to gain read and write access to physical memory that has been freed and potentially reallocated to other processes. This could lead to unauthorized memory access, data corruption, or information disclosure between processes using the GPU.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation has been published by Imagination Technologies at this time.