The vulnerability is a buffer overflow (CWE-787) in NVIDIA's Virtual GPU Manager. An attacker who can send crafted data to the manager could trigger an out‑of‑bounds memory access, enabling tampering of program data, forced service termination, or leakage of sensitive information. The impact is confined to the virtual GPU environment and the host processes interacting with it, potentially allowing an attacker to disrupt or compromise the integrity of the virtualized graphics workload and the host system.

NVIDIA Virtual GPU Manager is affected. Specific product or version details are not provided in the CNA data; administrators should confirm that any installed vGPU software is newer than the last known vulnerable release.

The CVSS score of 5.8 indicates a medium risk level. EPSS data is unavailable, so current exploitation likelihood is unknown. The vulnerability is not listed in CISA's KEV catalog, suggesting no known widespread exploitation. The likely attack vector is inferred to be a local or networked attack that can influence the virtual GPU manager through the graphics driver interface, but the precise conditions are not specified in the advisory.