CVE-2025-33218CWE-190

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow

High · published January 28, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

⚡ An integer overflow in NVIDIA's GPU Display Driver could let attackers run amok like a raccoon in a dumpster! 🎮🔍 Think of this vulnerability like a ticket counter that accidentally sells more tickets than there are seats. Once the overflow happens, it's a free-for-all, and anyone could end up in a prime seat — or worse, wreak havoc! If exploited, this vulnerability could lead to code execution, giving attackers a backstage pass to your system. They could escalate privileges, tamper with data, cause a denial of service, or even bleed sensitive information like a leaky faucet. That's a serious security breach!

Put simply

Think of this vulnerability like a ticket counter that accidentally sells more tickets than there are seats. Once the overflow happens, it's a free-for-all, and anyone could end up in a prime seat — or worse, wreak havoc! This vulnerability exists in the kernel mode layer (nvlddmkm.sys) of the NVIDIA GPU Display Driver, allowing attackers to cause an integer overflow that could lead to unintended behavior in the system, including executing arbitrary code.

What to do

If exploited, this vulnerability could lead to code execution, giving attackers a backstage pass to your system. They could escalate privileges, tamper with data, cause a denial of service, or even bleed sensitive information like a leaky faucet. That's a serious security breach! To protect against this vulnerability, make sure to update your NVIDIA GPU Display Driver to the latest version as soon as possible. Regularly check for updates and enable automatic updates to keep your drivers secure. Don't let those raccoons take over your system! You've got this! Follow these steps to secure your system, and you'll be well on your way to superhero status in the digital world! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.0th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-01-28T17:47Z
EPSS history
Timeline
  • 28 JAN 17:47Z
    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow
    cvelistv5