An out‑of‑bounds write in the kernel mode layer of NVIDIA GPU Display Driver for Windows and Linux can be triggered by an attacker. Successful exploitation may lead to arbitrary code execution, denial of service, privilege escalation, information disclosure and data tampering, as the vulnerability allows memory corruption at kernel level.

The vulnerability affects NVIDIA GPU Display Driver for Windows and Linux. This includes the GeForce, RTX, Quadro, NVS, and Tesla product families. No specific driver release or version information is available in the data, so all current drivers for these graphics platforms are potentially impacted until a fix is issued.

The CVSS score of 6.7 indicates a medium severity potential. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog. Based on the description, the likely attack vector is local or requires privileged access to the driver; remote exploitation is possible only if the attacker can interact with the GPU device through an operating system exploit. The risk remains significant because a successful kernel‑mode write can compromise system integrity and confidentiality.