CVE-2026-24156
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability in NVIDIA DALI allows deserialization of untrusted data, which could lead to arbitrary code execution by an attacker.
Risk Assessment
The risk for the organization includes potential system compromise, data theft, or service disruption.
Recommendation
It is recommended to immediately update NVIDIA DALI to the latest version and restrict access to untrusted data sources.
Other vulnerabilities in NVIDIA DALI
See all- CVE-2026-65150High
NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds read. Successful exploitation may lead to information disclosure, data tampering, and denial of service.
- CVE-2026-65149High
NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds write. Successful exploitation may lead to denial of service, information disclosure, and data tampering.
- CVE-2026-65148High
NVIDIA DALI contains a vulnerability that allows an attacker to cause a stack-based buffer overflow. Successful exploitation may lead to code execution, information disclosure, data tampering, and denial of service.
- CVE-2026-65147High
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.
- CVE-2026-24181High
NVIDIA DALI contains a vulnerability in a component that allows an attacker to cause improper index validation. Successful exploitation could lead to code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-24180High
NVIDIA DALI contains a heap-based buffer overflow vulnerability. An attacker could exploit this to achieve code execution, data tampering, denial of service, or information disclosure.
Original NVD description (English source)
NVIDIA DALI contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS