This vulnerability occurs in the NVIDIA GPU Display Driver firmware on Windows and Linux. A null pointer dereference can be triggered, causing the driver to crash and resulting in denial of service that disrupts graphics rendering and application stability. The weakness is a classic null pointer dereference, CWE-476.

The affected hardware are NVIDIA GPUs, covering the GeForce, RTX, Quadro, NVS, and Tesla lines. The flaw resides in the GPU Display Driver firmware on both Windows and Linux operating systems. No specific firmware or driver versions are listed in the advisory, so all current releases prior to an official fix are potentially impacted.

The CVSS score of 4.4 classifies this modestly as a moderate risk vulnerability. EPSS data is not available and the vulnerability is not listed in CISA’s KEV catalog. While the exact attack vector is not specified, a null pointer dereference implies that an attacker would need to provide malicious firmware or otherwise manipulate the driver at a low level, suggesting a local or firmware‑level threat. Consequently, the likelihood of exploitation is uncertain, but if the flaw is exploited, it would simply cause a service interruption.