The vulnerability originates in the kernel‑mode layer of NVIDIA’s GPU Display Driver for Windows, where an incorrect buffer size calculation can occur. This flaw permits a malicious actor to exploit the driver to trigger buffer overflows, leading to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The defect aligns with CWE‑131, "Incorrect Calculation of Buffer Size," and represents a high‑risk security gap that could compromise system integrity and confidentiality.

Affected products include NVIDIA GPU families: GeForce, RTX, Quadro, NVS, Tesla, and the Virtual GPU Manager. No specific version ranges are listed in the CVE, so all current and prior drivers for these products are potentially vulnerable until a patch is applied.

The CVSS score of 7.8 classifies the issue as high severity. EPSS data is not available, and the vulnerability is not yet listed in CISA’s KEV catalog. Because the flaw resides in kernel mode, the likely attack vector is a local or privileged attacker exploiting GPU‑accelerated workloads or driver interfaces. Successful exploitation could allow arbitrary code execution with elevated privileges, as the driver has system‑level permissions. Without EPSS data, exact exploitation probability remains uncertain, but the severity and kernel exposure warrant urgent attention.