Impact
NVIDIA GPU Display Driver for Windows contains a kernel module flaw where an incorrect comparison can be triggered by an attacker. This flaw allows the attacker to execute arbitrary code, crash the driver, elevate privileges, disclose information, and tamper with data. The vulnerability falls under CWE-190, an integer overflow, indicating that the comparison fails to validate input or boundary conditions correctly.
Affected Systems
The affected products are NVIDIA GeForce, RTX, Quadro, NVS, and Tesla graphics drivers for Windows. Specific version ranges are not listed in the available data, so any installed version of these drivers may be vulnerable until a patch is released.
Risk and Exploitability
The CVSS score of 7.8 identifies it as high severity. EPSS is not provided, so the likelihood of exploitation is unknown. The vulnerability is not in NVIDIA's KEV catalog. The probable attack vector is local, requiring the attacker to run privileged code that can load or interact with the kernel module. Once a local attacker triggers the incorrect comparison, the consequences include code execution and privilege escalation to system level.
OpenCVE Enrichment