This vulnerability, identified as CWE-787, exists in the kernel mode layer of the NVIDIA GeForce GPU Display Driver on Windows and Linux platforms. It allows an attacker with limited privileges to perform an out-of-bounds write, potentially enabling various impacts including code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Exploitation of this vulnerability could allow an attacker with local access and limited privileges to execute arbitrary code, cause system crashes (denial of service), escalate their privileges, disclose sensitive information, and tamper with data on affected systems running the NVIDIA GeForce GPU Display Driver.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict local access to trusted users and monitor for unusual activity related to GPU driver usage.