The vulnerability resides in a secure microcontroller component of the NVIDIA GPU Display Driver for Windows and Linux, where an incorrect permission assignment allows a privileged local attacker to modify protected memory that should be inaccessible. A successful exploitation could enable the attacker to execute arbitrary code within the driver context and elevate privileges on the host system.

All NVIDIA GPU families that use the standard GPU Display Driver—specifically GeForce, RTX, Quadro, NVS, and Tesla series—are potentially affected on both Windows and Linux platforms. Version information is not provided, so any driver build that contains the unchecked permission assignment is considered at risk.

The CVSS score of 6 classifies this flaw as medium severity, while the EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog. The likely exploitation path requires local privileged access, meaning an attacker who already has administrative or root-level rights could leverage the flaw to gain further control or run arbitrary code.