An integer underflow flaw exists in the kernel module of NVIDIA’s GPU Display Driver for Windows. The flaw can allow an attacker to manipulate internal calculations, potentially leading to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The severity of the vulnerability is high, with a CVSS score of 7.8, indicating that if exploited it could cause significant compromise of the operating system and any applications that rely on the driver.

The issue affects all NVIDIA GPU Display Drivers for Windows that support GeForce, RTX, Quadro, NVS, and Tesla GPUs. No specific version numbers are listed, so any driver that has not been updated to the vendor’s latest release is potentially compromised.

The vulnerability carries a high CVSS score of 7.8 and is not currently listed in the CISA KEV catalog, though EPSS information is unavailable. Based on the driver context, the likely attack vector requires local interaction with the kernel module; thus an attacker would need to execute code on the affected machine to trigger the integer underflow. Given the potential for code execution and privilege escalation, this vulnerability poses a significant risk to systems with the affected drivers.