This vulnerability (CWE-129) exists in the kernel mode layer of NVIDIA GeForce GPU Display Drivers on Windows and Linux platforms. It results from improper validation of array indices, allowing out-of-bounds access. Successful exploitation may lead to multiple impacts including code execution, denial of service, privilege escalation, information disclosure, and data tampering. The CVSS v3.1 base score is 7.8, reflecting high severity with local attack vector, low attack complexity, and requiring low privileges without user interaction.

An attacker with local access and low privileges could exploit this vulnerability to execute arbitrary code in kernel mode, disrupt system availability, escalate privileges, access sensitive information, or modify data. This could compromise system integrity and confidentiality on affected Windows and Linux systems running NVIDIA GeForce drivers.

No patch or remediation information is currently available. Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until a fix is released, limit local access to trusted users and monitor for updates from NVIDIA.