A high-severity memory corruption vulnerability in Imagination Technologies Graphics DDK allows a local authenticated user to gain unauthorized kernel memory access or cause system crashes.

The vulnerability stems from improper validation of array indices during GPU system calls, specifically categorized as CWE-823: Use of Out-of-range Pointer Offset. A local user with low privileges can exploit this flaw to trigger out of bounds kernel memory reads or use after free conditions.

The ability for a non-privileged user to access kernel memory poses a significant risk to system integrity and confidentiality. While the CVSS score of 7.1 indicates a high risk, the potential for kernel-level memory corruption could lead to privilege escalation or system instability, directly impacting operational uptime and the security of data processed within the kernel environment.

Immediate Action: Update the Imagination Technologies Graphics DDK to version 26.1 RTM2 or later to apply the necessary index validation fixes.

Proactive Monitoring: Monitor system logs for unusual GPU driver behavior or crash reports that may indicate attempts to exploit memory vulnerabilities.

Compensating Controls: Restrict access to the graphics subsystem for unauthorized users where possible, and ensure that kernel-level protections are active to limit the impact of potential memory corruption.

Public Exploit Available: Unknown.

Given the severity of a kernel-mode vulnerability, organizations should prioritize updating the Graphics DDK across all affected systems. Failure to address this flaw could allow local attackers to bypass security boundaries, making the immediate application of the vendor-provided patch critical to maintaining a secure computing environment.