An unprivileged user can trigger a use‑after‑free condition in NVIDIA’s GPU Display Driver by sending a specific sequence of driver commands, potentially leading to code execution, privilege escalation, denial of service, and information disclosure. The vulnerability arises from improper memory handling where an object is freed but a subsequent reference still accesses it, allowing malicious manipulation of the freed memory space.

This flaw affects NVIDIA GPU Display Drivers for Windows and Linux used across GeForce, RTX, Quadro, NVS, and Tesla product lines. No specific driver versions are listed in the available data, indicating that the issue may be present in a range of releases until patched by NVIDIA.

The CVSS score of 7.8 classifies this vulnerability as high severity, while the EPSS value is not available. The vulnerability is not listed in CISA’s KEV catalog. Attackers need local or low‑privilege access to issue the driver commands that trigger the use‑after‑free, making a local exploitation path likely but not remote. Due to the privileged actions possible after exploitation, the overall risk remains significant whenever the affected drivers are deployed on user‑level devices.