This vulnerability (CWE-125) exists in the kernel mode layer of the NVIDIA GeForce GPU Display Driver on Windows and Linux platforms. It allows an attacker with limited privileges to perform an out-of-bounds read, which can be leveraged to achieve multiple impacts including code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation may result in arbitrary code execution, denial of service conditions, escalation of privileges, unauthorized information disclosure, and modification of data. This could compromise system security and stability on affected Windows and Linux systems running the vulnerable NVIDIA GeForce driver.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time. Until a patch is available, limit local access to trusted users and monitor for suspicious activity related to GPU driver usage.