The vulnerability resides in the kernel mode layer of NVIDIA's GPU Display Driver for Windows and Linux, where improper input validation can be leveraged by an attacker. A successful exploitation could result in code execution, denial of service, privilege escalation, information disclosure, or data tampering, thereby compromising the confidentiality, integrity, and availability of the affected system.

All NVIDIA GPUs using the affected driver are impacted, including GeForce, RTX, Quadro, NVS, and Tesla platforms on both Windows and Linux operating systems. No specific driver release numbers are listed, but the vulnerability applies broadly to the GPU driver's kernel mode component across these families.

The CVSS v3.1 base score of 6.7 classifies the flaw as a medium severity issue. The EPSS score is currently unavailable and the vulnerability is not listed in the CISA KEV catalog; however, the kernel mode nature implies privileged or local access may be required to exploit the flaw. If an attacker gains sufficient context, the potential for remote code execution or elevation of privileges is significant, making timely patching essential.