Impact
The vulnerability resides in NVIDIA GPU Display Driver for Windows and allows an unprivileged user to perform an out‑of‑bounds write in the kernel mode layer. This flaw is a stack‑based buffer overflow, classified as CWE-121. An attacker who succeeds can overwrite critical kernel memory, gain execution privileges, and potentially execute arbitrary code or crash the system.
Affected Systems
Affected products include NVIDIA GeForce, RTX, Quadro, NVS, Tesla, and the NVIDIA Guest driver. No specific version information is provided, so all consumer and professional GPU families that ship the standard driver are potentially impacted.
Risk and Exploitability
The CVSS score of 7.8 indicates high severity. EPSS information is not available, so the exact exploitation probability cannot be quantified, and the vulnerability is not listed in CISA KEV. The attack vector is local; an attacker needs only unprivileged access to the machine to trigger the out‑of‑bounds write and achieve privilege escalation, code execution, or denial of service.
OpenCVE Enrichment