This vulnerability (CVE-2026-41154) affects the Graphics DDK from Imagination Technologies. It arises when the software indexes pages larger than 4kB during the page freeing process in the sparse memory implementation. Incorrect buffer indexing leads to out-of-bounds (OOB) memory access, specifically writes, which can be triggered by software running as a non-privileged user via GPU API calls. The CVSS 3.1 score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. No patch or official remediation information is currently provided by the vendor, and no known exploits are reported in the wild.

Successful exploitation can result in out-of-bounds kernel memory writes and reads, potentially allowing an attacker with limited privileges to compromise system confidentiality, integrity, and availability. This could lead to system crashes, data corruption, or escalation of privileges depending on the kernel memory affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations or workarounds are provided at this time.