A high-severity use-after-free vulnerability in the Imagination Technologies Graphics DDK enables local attackers to achieve potential code execution and system compromise.

This is a use-after-free vulnerability occurring due to improper resource management and reference counting in GPU system calls. An attacker with local, non-privileged access can exploit this flaw to trigger memory corruption, potentially leading to privilege escalation or system instability.

The vulnerability carries a CVSS score of 8.8, reflecting its potential for total system impact. Successful exploitation could allow a local user to bypass security controls, gain elevated privileges, or cause a denial of service, significantly compromising the integrity and availability of the affected host environment.

Immediate Action: Update the Imagination Technologies Graphics DDK to version 25.3 RTM or later to incorporate the necessary resource management fixes.

Proactive Monitoring: Monitor system logs for unusual GPU driver behavior or unexpected process crashes that may indicate exploitation attempts.

Compensating Controls: Restrict local user access to the system and ensure that only authorized personnel have the ability to execute applications that interface directly with the GPU driver.

Public Exploit Available: No

Given the potential for high-impact system compromise, organizations utilizing affected Imagination Technologies graphics components should prioritize updating their DDK drivers to the specified fixed version. System administrators must ensure that all workstations and servers using the vulnerable driver are remediated promptly to eliminate the possibility of local privilege escalation.