NVIDIA Display Driver for Linux contains a flaw in numeric type conversion that produces an incorrect conversion between numeric types, which leads to a heap buffer overflow. The vulnerability, classified as CWE‑681, can be exploited to cause denial of service, privilege escalation, information disclosure, data tampering, and remote code execution.

The flaw affects NVIDIA drivers for Linux used on GeForce, RTX, Quadro, NVS, Tesla, and the Virtual GPU Manager. No specific driver versions are listed, so all current installations that rely on these drivers are potentially vulnerable.

The CVSS score of 7.8 signifies a high severity. The EPSS score is not available, and the vulnerability is not listed in KEV, implying no widespread public exploits yet. The attack vector is not explicitly stated in the advisory, but the nature of the flaw suggests that it requires execution of malformed data within a driver context, likely through a local or remote user with access to the graphics stack. This affords the attacker the opportunity to crash or compromise the host system if successful.