The vulnerability is a use‑after‑free (CWE‑416, CWE‑825) that can be triggered by an unprivileged user through a deliberate sequence of driver commands. A successful exploitation enables the attacker to execute arbitrary code, raise privileges, crash the driver, alter data, and access sensitive information.

Affected systems are NVIDIA GPU drivers for Windows and Linux that support GeForce, RTX, Quadro, NVS, Tesla graphics cards, as well as the Guest Driver and Virtual GPU Manager components. The vulnerability applies to all driver releases lacking the fix; no specific version range is supplied in the advisory.

The CVSS score of 7.8 reflects a high severity, and while EPSS data is not provided, the flaw is not listed as a known exploited vulnerability by CISA. Attackers would need local access but can conduct the exploit from an ordinary user account, making a local attacker capable of code execution and privilege escalation. The risk remains significant until the driver is updated.