NVIDIA Virtual GPU Manager contains a kernel mode out-of-bounds write vulnerability (CWE-787) that can be triggered by a user with low privileges. This vulnerability allows an attacker to write outside the intended memory bounds, potentially leading to multiple impacts including arbitrary code execution, denial of service, privilege escalation, information disclosure, and data tampering. The CVSS v3.1 base score is 7.8, reflecting high severity with attack vector local, low attack complexity, and no user interaction required.

Exploitation of this vulnerability could allow a local user to execute arbitrary code with elevated privileges, cause system crashes (denial of service), disclose sensitive information, and tamper with data. This poses a significant risk to system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the affected NVIDIA Virtual GPU Manager components and monitor for unusual activity.