This vulnerability in Imagination Technologies Graphics DDK involves a use-after-free condition (CWE-416) where physical memory that has been allocated and freed without deferred free handling can still be accessed by the GPU. Non-privileged software can exploit this by issuing GPU system calls to write to these freed physical pages, potentially leading to unauthorized read/write access to memory. The issue arises from the kernel module freeing resources while the GPU may still use them, causing a race condition and memory corruption risks.

Successful exploitation could allow an attacker with non-privileged user access to write to arbitrary freed physical memory pages via GPU system calls. This can lead to confidentiality, integrity, and availability impacts, including potential privilege escalation, data corruption, or system instability. The CVSS score of 7.8 reflects high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Users should monitor Imagination Technologies advisories for updates and apply any forthcoming patches promptly.