NVIDIA DALI contains a flaw in one of its components where indices are not properly validated. The vulnerability can lead to code execution, data tampering, denial of service, and information disclosure if an attacker supplies crafted input. The weakness corresponds to improper index validation, identified as CWE-129.

The sole affected product is NVIDIA DALI. No specific version information is disclosed, so all installations of the library may be impacted until a patch is applied.

The CVSS score of 7.3 indicates this is a high severity vulnerability. EPSS information is not available and the issue is not listed in CISA KEV. The attack vector likely requires that the adversary can supply malicious input to the DALI component; this could occur locally when the library runs with elevated privileges, or remotely if external data is processed by the library. Successful exploitation can give an attacker the ability to execute arbitrary code, alter data, crash the application, or disclose sensitive information.