The flaw is an out‑of‑bounds read caused by an unbounded string operation in the kernel‑mode layer of NVIDIA’s GPU Display Driver for Windows and Linux (CWE‑125). An attacker that can trigger the buffer overflow could read unintended memory, potentially enabling arbitrary code execution, crashing the system, elevating privileges, or leaking and corrupting data.

NVIDIA GPU Display Drivers for the GeForce, RTX, Quadro, NVS, Tesla series and the Guest Driver on both Windows and Linux are affected. No specific version information is provided.

With a CVSS score of 6.7 the vulnerability is considered medium severity and is not listed in the CISA KEV catalog. Because the EPSS score is unavailable, the exploitation probability remains uncertain, yet the kernel‑level nature of the flaw suggests a potentially high impact should it be abused. An attacker would need to supply malicious data that triggers the unbounded string handling, likely requiring local execution privileges or control over a GPU‑accelerated application.