The vulnerability is a use‑after‑free flaw in the kernel‑mode layer of the NVIDIA GPU Display Driver for Windows. A successful exploit could enable an attacker to execute arbitrary code with kernel privileges, trigger a denial‑of‑service, or elevate privileges. The flaw, mapped to CWE‑416 and CWE‑825, arises when the driver erroneously accesses memory that has already been freed, allowing manipulation of the execution flow.

The flaw affects a broad range of NVIDIA GPU products, including GeForce, RTX, Quadro, NVS, and Tesla, as well as related components such as the Guest Driver and Virtual GPU Manager. No specific driver version range is listed, meaning that all current drivers could be vulnerable until a patched release is applied.

The CVSS score of 7.8 classifies the vulnerability as high severity. The EPSS score is not available, but because the exploit operates in kernel mode, it is likely limited to attackers who have local access or can execute code with elevated privileges on the target system. The vulnerability is not listed in the CISA KEV catalog, and there is no evidence of active widespread exploitation. Nonetheless, the potential for code execution and privilege escalation makes the risk significant for affected installations.