An integer overflow and use-after-free vulnerability in the Imagination Technologies Graphics DDK allows local, low-privileged users to achieve high confidentiality, integrity, and availability impact.

This vulnerability is a use-after-free flaw (CWE-416) triggered via improper GPU system calls by a locally authenticated user with low privileges.

A successful exploit of this vulnerability could allow a malicious local user to gain complete control over the affected system, resulting in total data compromise, system instability, and unauthorized access. With a CVSS score of 7.8 (High), the risk profile is elevated because local attackers can leverage the flaw to escalate privileges or corrupt memory.

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM2 or later.

Proactive Monitoring: Monitor system logs for unusual local process activity, GPU driver crashes, or unauthorized attempts to interact with graphics device nodes.

Compensating Controls: Restrict local user access and interactive logon rights to trusted personnel only, reducing the attack surface for locally executed code.

Public Exploit Available: No (false)

Given the high CVSS severity and the potential for total system compromise, administrators should prioritize updating the Imagination Graphics DDK across all affected systems. Applying the vendor-provided patch is critical to neutralizing the use-after-free vector and protecting host integrity.