The flaw is an out‑of‑bounds write located in Ring 1 of the Intel Data Center Graphics Driver for VMware ESXi, classified as CWE‑787. When triggered, the driver writes data past the end of a buffer, corrupting adjacent memory. This corruption can cause application crashes, data loss, or a full system reboot. The vendor’s own advisory states the attack may lead to denial of service and high‑level data corruption, with no impact on confidentiality.

Systems running the Intel Data Center Graphics Driver for VMware ESXi version prior to 2.0.2 are affected. The driver is distributed as part of Intel’s VM‑grade graphics stack and is used on corporate ESXi hosts.

The CVSS score of 8.3 indicates a high severity. EPSS is not available, and the vulnerability is not listed in CISA’s KEV catalog. The vulnerability is exploitable locally by a privileged user; the attack requires low complexity and no user interaction. An attacker with such access could corrupt memory, causing loss of integrity and availability, while confidentiality remains unaffected.