CVE-2026-65147
HighCVSS 7.3Summary
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.
Risk Assessment
Organizations using NVIDIA DALI may be exposed to data leakage and service disruption. The risk increases when the library processes untrusted input data.
Recommendation
Update NVIDIA DALI to the latest patched version and avoid processing untrusted input data until the update is applied.
Other vulnerabilities in NVIDIA DALI
See all- CVE-2026-65150High
NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds read. Successful exploitation may lead to information disclosure, data tampering, and denial of service.
- CVE-2026-65149High
NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds write. Successful exploitation may lead to denial of service, information disclosure, and data tampering.
- CVE-2026-65148High
NVIDIA DALI contains a vulnerability that allows an attacker to cause a stack-based buffer overflow. Successful exploitation may lead to code execution, information disclosure, data tampering, and denial of service.
- CVE-2026-24181High
NVIDIA DALI contains a vulnerability in a component that allows an attacker to cause improper index validation. Successful exploitation could lead to code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-24180High
NVIDIA DALI contains a heap-based buffer overflow vulnerability. An attacker could exploit this to achieve code execution, data tampering, denial of service, or information disclosure.
- CVE-2026-24156High
A vulnerability in NVIDIA DALI allows deserialization of untrusted data, which could lead to arbitrary code execution by an attacker.
Original NVD description (English source)
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS