NVIDIA Display Driver for Windows Use-After-Free Vulnerability Allowing Code Execution and Privilege Escalation

A use-after-free vulnerability has been identified in the NVIDIA Display Driver for Windows. This vulnerability could be exploited by an attacker to execute code, escalate privileges, tamper with data, cause a denial of service, or disclose information. The issue arises from improper memory management, allowing memory to be accessed after it has been freed, which can be manipulated to execute arbitrary code or perform unauthorized actions.

Impact

Exploitation of this vulnerability could lead to code execution, unauthorized privilege escalation, data manipulation, denial of service, and unauthorized information disclosure.

Remediation

Users can download the updated driver version 591.59, which addresses this vulnerability, from the NVIDIA Driver Downloads page. This update is also available through the NVIDIA Licensing Portal for vGPU software and Cloud Gaming updates.