NVIDIA Virtual GPU Manager contains a CWE-787 out-of-bounds write vulnerability that could be triggered by an attacker with local access and low privileges. The vulnerability allows out-of-bounds memory access, potentially leading to data tampering, denial of service, or information disclosure. The CVSS 3.1 base score is 5.8, reflecting medium severity with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. Affected versions include all releases up to and including March 2026. No patch or official remediation level has been published by NVIDIA as of the vulnerability publication date.

Successful exploitation could result in data tampering, denial of service, or information disclosure on affected systems running NVIDIA Virtual GPU Manager. The vulnerability requires local access with low privileges and has a high attack complexity, limiting ease of exploitation. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until a patch is available, limit local access to trusted users and monitor for unusual activity related to the Virtual GPU Manager. No official fix or temporary workaround has been published by NVIDIA at this time.