The NVIDIA GPU Display Driver for Windows contains a use‑after‑free flaw in the kernel mode driver. Exploitation of this defect can allow an attacker to execute arbitrary code, elevate privileges, crash the system, leak sensitive information, or tamper with data. The weakness involves memory corruption (CWE‑416) and improper resource management (CWE‑825).

The vulnerability affects NVIDIA’s GeForce, Guest driver, RTX, Quadro, NVS, and Tesla GPU families on Windows. All affected devices rely on the same kernel‑mode driver stack and are susceptible when the compromised driver is loaded into the system.

With a CVSS score of 7.8 the flaw is considered high severity. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, suggesting no documented exploitation at the time. The attack vector is not explicitly stated, but based on the description it is likely a local privilege escalation or code execution scenario where a user can trigger the use‑after‑free through a crafted request to the driver. The risk remains significant until a vendor‑issued fix is applied.