NVIDIA GPU Display Driver for Windows and Linux contains a kernel‑mode memory access flaw that lets a local user read or write memory belonging to another process. A successful exploit can lead to privilege escalation, allowing the attacker to execute arbitrary code, tamper with data, cause denial of service, or disclose sensitive information.

All NVIDIA consumer and professional GPUs are affected, including GeForce, RTX, Quadro, NVS, and Tesla lines, as well as the NVIDIA Guest driver on Windows and Linux platforms. The issue exists in the published GPU display drivers; no specific version numbers are listed in the advisory, so users should verify that their driver is not the affected version and update accordingly.

The CVSS base score of 7.8 indicates a high severity. No EPSS score is available, and the vulnerability is not listed in CISA KEV, implying limited evidence of exploitation in the wild. The flaw is local and requires the attacker to have the ability to run code in user space on the target machine; once the kernel mode layer is exploited, the attacker can gain elevated privileges. The attack vector is most likely local with direct kernel exploitation.