A kernel‑mode out‑of‑bounds write exists in NVIDIA Virtual GPU Manager for Windows and Linux. The vulnerability allows a local user to corrupt memory, which can be leveraged for code execution, denial of service, privilege escalation, information disclosure, or data tampering. The impact is confined to the system hosting the vGPU manager, but if successfully exploited it could compromise the entire host environment. The weakness is a classic buffer overflow (CWE‑787).

The affected products are NVIDIA’s Virtual GPU Manager on both Windows and Linux platforms. No specific version numbers are disclosed, so all revisions of the driver package that include the kernel module are potential targets. Administrators should verify the installed driver and manager version against NVIDIA’s security advisories.

The CVSS score is 7.8, indicating high severity. EPSS data is not available, so the likelihood of exploitation is unknown, but the nature of the flaw—an out‑of‑bounds write in kernel mode—suggests a practical exploit path for a privileged user. The vulnerability is not listed in the CISA KEV catalog, but its impact warrants immediate attention. Attackers would need local access to the host running vGPU manager; no remote entry is described, implying exploitation requires privileged or authenticated interaction with the driver. Even so, the potential for system compromise makes the risk significant.