NVIDIA NVAPI for Windows contains a CWE-787 out-of-bounds write vulnerability. An attacker with limited privileges could exploit this flaw to perform unauthorized memory writes, potentially resulting in code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The CVSS 3.1 base score is 7.8, indicating high severity. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation may allow attackers to execute arbitrary code, cause system crashes, elevate privileges, disclose sensitive information, and alter data integrity within affected NVIDIA GeForce systems using NVAPI on Windows.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to systems with NVIDIA NVAPI and monitor for suspicious activity related to privilege escalation or memory corruption.