This vulnerability involves an out-of-bounds read (CWE-125) in the NVIDIA GeForce GPU Display Driver firmware on Windows and Linux platforms. An attacker with high privileges could exploit this flaw to read memory outside intended bounds, potentially resulting in code execution, denial of service, privilege escalation, information disclosure, and data tampering. The CVSS 3.1 base score is 6.7 with attack vector local, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation may allow an attacker with local high privileges to execute arbitrary code, cause denial of service, escalate privileges, disclose sensitive information, and tamper with data on affected systems running the NVIDIA GeForce GPU Display Driver firmware.

Patch status is not yet confirmed — check the NVIDIA vendor advisory for current remediation guidance. Until an official fix is available, restrict access to systems with the affected driver to trusted users with appropriate privileges.