A kernel‑mode color transform path in NVIDIA’s GPU Display Driver for Windows leaks excessive kernel stack space when processing YCbCr420 display emulation. The resulting stack exhaustion can cause the system or driver to fail, leading to a denial of service. The weakness is a stack‑based buffer overflow (CWE‑121).

NVIDIA GPU Display Drivers for Windows that support GeForce, RTX, Quadro, NVS, and Tesla product lines are affected. The CVE does not specify fixed or affected driver versions, so any installations of the NVIDIA GPU driver package that support the affected color transform path are potentially vulnerable.

The CVSS score of 5.5 indicates a moderate severity vulnerability. EPSS is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting no public exploit is known. Exploitation would likely require manipulating a YCbCr420 image to trigger the kernel stack overflow, so threat is limited to local or potentially remote code provided the attacker can influence the image processing path. Given the lack of public exploits and moderate severity, a risk rating of moderate applies, but patching is still recommended to protect against possible future exploitation.