An improper input validation flaw in the firmware of NVIDIA GPU Display Drivers for Windows and Linux could allow an attacker to execute arbitrary code, crash the driver, or obtain privileged access. The vulnerability could also lead to privilege escalation, data tampering, information disclosure, and denial of service, thereby compromising system confidentiality, integrity, and availability.

Affected products include NVIDIA GeForce, RTX, Quadro, NVS, and Tesla GPUs running the official NVIDIA Display Driver on Windows or Linux. Version details are not disclosed, so all current drivers are potentially vulnerable until a fix is released.

The CVSS score is 6.7, indicating moderate to high severity. EPSS data is not available, and the issue is not listed in CISA KEV. The attack vector is not explicitly described in the statement; based on the firmware context it is inferred that local or privileged access is likely required, possibly through a malicious firmware image or compromised system. Successful exploitation could grant elevated privileges or disrupt GPU operation.