This vulnerability involves an out-of-bounds write (CWE-787) in the Graphics Device Driver Kit (DDK) from Imagination Technologies. The issue arises when the sparse memory implementation incorrectly indexes buffers while freeing pages larger than 4kB, causing out-of-bounds access to kernel memory. The flaw can be exploited through GPU API calls executed by non-privileged users, potentially leading to memory corruption at the kernel level.

The vulnerability allows non-privileged users to cause out-of-bounds kernel memory reads or writes via GPU API calls. This could lead to system instability, crashes, or potentially enable escalation of privileges or arbitrary code execution in the kernel context, depending on exploitation. However, no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been published. Users should monitor Imagination Technologies' advisories for updates and apply patches once available.