The vulnerability arises from incorrect validation of array indices in the Graphics DDK by Imagination Technologies. This flaw allows non-privileged software to perform GPU system calls that cause out-of-bounds reads of kernel memory and, in some cases, use-after-free of arbitrary GPU pages. The issue is categorized under CWE-823, indicating a use of out-of-range pointer offset. No CVSS score or detailed exploit information is available, and no patch or remediation guidance has been provided by the vendor at this time.

An attacker with non-privileged user access could exploit this vulnerability to read kernel memory out-of-bounds and potentially trigger use-after-free conditions on GPU pages. This could lead to unauthorized access to sensitive kernel memory or instability in GPU operations. However, no known exploits are reported in the wild, and the exact impact severity is not quantified.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published by Imagination Technologies. Until a patch is available, restrict untrusted software from making GPU system calls if possible.