CVE-2026-65149
HighCVSS 7.3Summary
NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds write. Successful exploitation may lead to denial of service, information disclosure, and data tampering.
Risk Assessment
The vulnerability may lead to memory corruption, application destabilization, and data leakage or tampering.
Recommendation
Update NVIDIA DALI to a patched version and avoid processing untrusted input data.
Other vulnerabilities in NVIDIA DALI
See all- CVE-2026-65150High
NVIDIA DALI contains a vulnerability that allows an attacker to cause an uncontrolled out-of-bounds read. Successful exploitation may lead to information disclosure, data tampering, and denial of service.
- CVE-2026-65148High
NVIDIA DALI contains a vulnerability that allows an attacker to cause a stack-based buffer overflow. Successful exploitation may lead to code execution, information disclosure, data tampering, and denial of service.
- CVE-2026-65147High
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.
- CVE-2026-24181High
NVIDIA DALI contains a vulnerability in a component that allows an attacker to cause improper index validation. Successful exploitation could lead to code execution, data tampering, denial of service, and information disclosure.
- CVE-2026-24180High
NVIDIA DALI contains a heap-based buffer overflow vulnerability. An attacker could exploit this to achieve code execution, data tampering, denial of service, or information disclosure.
- CVE-2026-24156High
A vulnerability in NVIDIA DALI allows deserialization of untrusted data, which could lead to arbitrary code execution by an attacker.
Original NVD description (English source)
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS