GPU DDK - OOB write in UntwiddlePOTSquare64bpp

Summary

A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or write crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable further exploits on the device.

Remediation

1. Inventory every Imagination Technologies Graphics DDK deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://www.imaginationtech.com/gpu-driver-vulnerabilities/