CVE-2026-65148
HighCVSS 7.3Summary
NVIDIA DALI contains a vulnerability that allows an attacker to cause a stack-based buffer overflow. Successful exploitation may lead to code execution, information disclosure, data tampering, and denial of service.
Risk Assessment
The vulnerability may enable arbitrary code execution and severe compromise of systems using NVIDIA DALI.
Recommendation
Update NVIDIA DALI to a patched version and avoid processing untrusted input data.
Other vulnerabilities in NVIDIA DALI
See all- CVE-2026-65150High
NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds read. Successful exploitation may lead to information disclosure, data tampering, and denial of service.
- CVE-2026-65149High
NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds write. Successful exploitation may lead to denial of service, information disclosure, and data tampering.
- CVE-2026-65147High
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.
- CVE-2026-24181High
NVIDIA DALI contains a vulnerability in a component that allows an attacker to cause improper index validation. Successful exploitation could lead to code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-24180High
NVIDIA DALI contains a heap-based buffer overflow vulnerability. An attacker could exploit this to achieve code execution, data tampering, denial of service, or information disclosure.
- CVE-2026-24156High
A vulnerability in NVIDIA DALI allows deserialization of untrusted data, which could lead to arbitrary code execution by an attacker.
Original NVD description (English source)
NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS