This vulnerability allows a malicious actor to trigger improper input validation within NVIDIA GPU firmware, which could lead to execution of arbitrary code, denial of service, privilege escalation, information disclosure, and data tampering. The weakness resides in the firmware of the GPU Display Driver for Windows and Linux, and it can be triggered by supplying malformed input streams to the firmware. The firmware flaw is broadly classified as an input validation error.

Affected products include NVIDIA GPU families such as GeForce, RTX, Quadro, NVS, and Tesla. No specific model or firmware version information is provided, so any device using the affected firmware may be at risk.

The CVSS score of 6.7 indicates a medium to high risk level, but the EPSS score is not available, so the current estimated exploitation probability is unclear. The vulnerability is not listed in the CISA KEV catalog, suggesting that known large-scale attacks have not been reported. The attack vector is not explicitly described, so it is inferred that the exploit may be local or remote depending on how the firmware receives malicious input. Because the flaw is in firmware, an attacker may need to supply a crafted firmware payload or exploit a driver interface that processes firmware updates.