This vulnerability is an out-of-bounds read (CWE-125) in the kernel mode layer of the NVIDIA GeForce GPU Display Driver on Windows and Linux platforms. The flaw arises from an unbounded string operation that can be triggered by a user with high privileges. Successful exploitation may lead to multiple impacts including code execution, denial of service, privilege escalation, information disclosure, and data tampering. The CVSS v3.1 base score is 6.7, reflecting medium severity with attack vector local, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An attacker with high privileges on the affected system could exploit this vulnerability to execute arbitrary code, cause system crashes (denial of service), escalate their privileges further, access sensitive information, or modify data. The vulnerability affects the kernel mode layer of the NVIDIA GeForce driver, increasing the potential impact on system stability and security.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until a fix is available, limit access to systems with NVIDIA GeForce drivers to trusted users with high privileges to reduce exploitation risk.