This vulnerability involves an integer overflow in the Imagination Technologies Graphics DDK GPU user-space driver. The driver calculates required memory size from untrusted input, but due to integer overflow, the computed size can be smaller than necessary. Subsequent write operations then exceed the allocated memory boundary, causing out-of-bounds writes that corrupt adjacent memory. This can result in process instability or termination, affecting the GPU GLES render process when handling WebGPU content.

Successful exploitation can cause high-severity impacts including memory corruption, leading to confidentiality, integrity, and availability loss. Specifically, it may cause browser or GPU process crashes, potentially allowing denial of service or further exploitation depending on the environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation is currently documented. Users and administrators should monitor Imagination Technologies advisories for updates and apply patches once available.