The NVIDIA GPU Display Driver contains an out‑of‑bounds write in its kernel module. A successful exploitation can allow an attacker to execute arbitrary code with kernel privileges, potentially causing privilege escalation, data tampering, information disclosure, or a denial‑of‑service condition. The vulnerability aligns with CWE‑787, which describes a heap buffer overflow that causes unsafe memory writes.

This issue affects a broad range of NVIDIA graphics products that run Windows, including GeForce, RTX, Quadro, NVS, Tesla, as well as the Guest driver and the Virtual GPU Manager. All versions of the NVIDIA GPU Display Driver for Windows that contain the affected kernel module are impacted.

The vulnerability carries a CVSS score of 7, indicating a medium to high severity. No EPSS information is available, and the vulnerability is not listed in CISA’s KEV catalog. Because the flaw resides in the kernel module, successful exploitation likely requires local privileged access or the ability to load drivers, but the exact attack vector is not specified in the public description; thus the risk is significant for systems where untrusted users can influence driver loading.