NVIDIA GPU Display Driver for Windows contains a vulnerability in its kernel module. An attacker who can trigger the flaw could cause an out-of-bounds read of kernel memory, which can lead to both denial of service by crashing the graphics subsystem and disclosure of sensitive data from memory that the driver accesses.

All NVIDIA graphics drivers for Windows that include the GeForce, RTX, Quadro, NVS, and Tesla products are affected. The vulnerability is present in the kernel module component of the driver; version information is not specified in the advisory, so any installed driver that has not yet received the official fix should be considered vulnerable.

The CVSS score of 7.7 indicates a high risk level, and the lack of an EPSS score means no current exploitation data is available. The vulnerability is not listed in the CISA KEV catalog. Based on the nature of the flaw—a kernel memory out-of-bounds read—it is inferred that the attack requires local user privileges or a privileged process that can execute code in the driver context, rather than remote network access. Successful exploitation could cause an application or system crash and potentially expose kernel memory contents to the attacker.