NVIDIA GPU Display Driver for Windows contains a kernel‑module vulnerability that allows a local attacker to trigger a NULL pointer dereference. A successful exploitation would corrupt the driver state and cause the graphics subsystem to crash, resulting in a denial of service to the affected user. The weakness is a classic null reference bug (CWE‑476). No escalation of privileges or data theft is expected from this flaw.

The vulnerability is present in all NVIDIA GPU Display Driver for Windows variants that serve GeForce, RTX, Quadro, NVS, and Tesla cards. Specific version ranges are not provided in the advisory; any driver built for Windows that supports these GPUs could be affected.

The CVSS score of 5.5 indicates moderate severity; the advisory notes a local attack vector with no publicly disclosed exploitation details. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited known exploitation. While the impact is limited to service disruption, a local attacker who can connect to or physically access the machine could force the driver to crash, potentially causing system instability or unplanned restarts. The overall risk remains moderate pending further exploitation evidence.