This vulnerability involves a use-after-free (CWE-416) condition in the Imagination Technologies Graphics DDK. Specifically, a shared resource (memory page) managed by the CPU driver and accessed by the GPU firmware can be freed prematurely by the CPU thread before the GPU firmware finishes its access. This creates a write use-after-free scenario when software running as a non-privileged user conducts improper GPU system calls, potentially leading to corruption or instability. The CVSS 3.1 base score is 7.7, reflecting low attack complexity, no privileges required, no user interaction, and high impact on integrity and availability.

The vulnerability allows an attacker with local access and no privileges to cause a write use-after-free condition, potentially leading to corruption of GPU memory or system instability. This impacts the integrity and availability of the affected system components but does not compromise confidentiality. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or remediation level has been published by Imagination Technologies. Until a patch is available, limiting access to the affected Graphics DDK and monitoring for updates from the vendor is recommended.