NVIDIA DALI contains a flaw that allows the deserialization of untrusted data. This weakness can let an attacker execute arbitrary code within the DALI process, potentially compromising confidentiality, integrity, and availability of systems that rely on it.

The vulnerability is present in NVIDIA DALI. No specific version information is supplied in the CVE record, so all releases of DALI should be considered potentially affected until further clarification is provided.

The flaw has a CVSS score of 7.3, indicating high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, but the potential for arbitrary code execution makes it a significant risk. Based on the description, the likely attack vector is the delivery of malicious data to the DALI component—such as through API calls, embedded data streams, or input files—though the exact conditions are not detailed. An attacker who can supply such data could potentially take control of the affected system.