NVIDIA GPU Display Driver for Windows and Linux contains a kernel‑module use‑after‑free flaw (CWE‑416) and a memory‑disclosure weakness (CWE‑825). An attacker that can trigger the flaw may overwrite or read freed memory, potentially gaining code execution, causing kernel panic or denial of service, escalating privileges, or leaking sensitive data.

The vulnerability affects all NVIDIA GPU driver stacks for GeForce, RTX, Quadro, NVS, and Tesla devices on both Windows and Linux operating systems. The kernel module is loaded during graphics initialization and is present in all public driver releases distributed by NVIDIA.

The CVSS score of 6.4 indicates a medium risk level. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, which reduces current public exploitation evidence. The attack vector is not explicitly defined; it is inferred that local or privileged execution may be required to inject malicious payloads into the driver module. Improper exploitation could lead to system compromise or crash, but the lack of widespread exploitation reports suggests moderate threat urgency.