The vulnerability is an out‑of‑bounds write in the NVIDIA Display Driver for Windows and Linux, classified as CWE‑787. A successful exploitation can lead to denial of service, escape from kernel mode, data tampering, information disclosure and arbitrary code execution. The driver can become a vector for privilege escalation when an attacker has the ability to supply malicious graphics data or control the driver’s memory handling routines. Based on the description, it is inferred that the flaw is exploitable during normal driver operation without requiring any special privileges beyond those held by the user running the graphics stack.

NVIDIA GeForce, RTX, Quadro, NVS and Tesla series GPUs are impacted through their Windows and Linux display drivers. All driver releases documented before the fix are potentially vulnerable, regardless of the specific vendor model. No version range is listed, so any installation of the affected driver families should be reviewed.

The CVSS score of 7.8 indicates high severity, and the KEV catalog lists this vulnerability as not yet exploited in the wild. EPSS data is not available, so the likelihood of exploitation cannot be quantified, but based on the description, it is inferred that the flaw’s nature and the critical operating system components it touches imply a non‑negligible risk. Based on the description, it is also inferred that attackers would likely need local access and the ability to interact with the graphics driver, making the vector more of a high‑privilege or trusted‑process issue than a remote network exploit.