The vulnerability arises from improper validation of the log2 page size parameter in GPU system calls within the Imagination Technologies Graphics DDK. When a crafted log2 page size is supplied by software running with non-privileged user rights, the system may incorrectly treat 4K pages as larger pages, resulting in out-of-bounds memory reads or writes. This can lead to unauthorized memory access beyond the 4K page boundary. No CVSS score or detailed exploit information is available, and no patch or remediation guidance has been provided by the vendor at this time.

The impact of this vulnerability is unauthorized out-of-bounds memory read and/or write access caused by improper validation of page size parameters in GPU system calls. This could potentially allow a non-privileged user to access or modify memory beyond intended limits, which may lead to data corruption or information disclosure. However, no known exploits are reported in the wild, and the exact consequences depend on the context of use.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigation or workaround has been provided by the vendor at this time.