It’s pretty much a program running in OS kernel space to handle specific function calls which need low level system access. Most hardware needs custom drivers to work because they need to interact with those low level OS components, so that’s why they’re mostly associated with hardware.

A lot of antiviruses use custom drivers to intercept and inspect program behavior to look for viruses, etc