NVIDIA GPU Display Driver for Windows Use-After-Free Vulnerability Allowing Code Execution

A use-after-free vulnerability has been identified in the NVIDIA GPU Display Driver for Windows. This vulnerability arises from a race condition that an attacker with local unprivileged access could exploit, potentially leading to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized code execution, increased privileges, manipulation of data, disruption of service, or leakage of sensitive information.

Remediation

Users can download the updated driver version 577.00 from the NVIDIA Driver Downloads page. For those using the .run installer on Linux, the updated version is available through the NVIDIA Licensing Portal.