This vulnerability arises from incorrect validation of array indices in the Graphics DDK by Imagination Technologies. Non-privileged user software can exploit this to cause out-of-bounds reads of kernel memory through GPU system calls. Additionally, it may lead to GPU use-after-free of arbitrary pages. The CVSS 3.1 base score is 7.1, reflecting high impact on confidentiality and availability with low attack complexity and requiring low privileges but no user interaction. No patch or official remediation guidance is currently available, and no known exploits in the wild have been reported.

Successful exploitation can result in high confidentiality impact due to out-of-bounds kernel memory reads and high availability impact from use-after-free conditions causing GPU instability or crashes. Integrity impact is not indicated. The vulnerability requires local low-privileged user access and no user interaction, making it a significant risk in multi-user or shared environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict untrusted users from executing software that can invoke GPU system calls in the affected environment. Monitor vendor communications for updates on patches or workarounds.