NVIDIA DALI contains a component that suffers a heap‑based buffer overflow. An attacker could trigger the overflow by supplying crafted data to the component, potentially resulting in memory corruption. If successful, the attacker may execute arbitrary code, tamper with data, cause denial of service, or disclose sensitive information. This vulnerability maps to CWE‑122 and threatens the confidentiality, integrity and availability of systems that use the library.

The affected vendor is NVIDIA, product DALI. No specific version ranges are listed in the advisory; systems running any unpatched versions of NVIDIA DALI are potentially vulnerable. Administrators should verify the installed DALI version and apply the vendor's update once available.

The CVSS score of 7.3 indicates a high severity. Without an EPSS score, the exact exploitation probability is unknown, but the absence from the KEV catalog suggests no confirmed widespread exploitation yet. The attack is likely local or requires an attacker who can supply input to the affected component. For systems that expose DALI to untrusted input, the risk of exploitation is significant; for isolated environments, the potential impact is lower.