NVIDIA DALI contains an uncontrolled out‑of‑bounds read that can expose internal data and destabilize the library when executed. The vulnerability allows a local or remote attacker, depending on how the library is invoked, to read memory beyond intended bounds, potentially leaking sensitive information and causing the process to crash. This directly undermines confidentiality by exposing unrevealed data and availability by disrupting normal operation.

The affected product is NVIDIA DALI. No specific build or version information is provided in the available data.

The CVSS score is 7.3, indicating a high‑impact vulnerability. The EPSS score is not available, so the likelihood of current exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves an application feeding malformed or untrusted input to the DALI library, which then triggers the out‑of‑bounds read. Successful exploitation could expose private data and terminate the application, leading to denial of service.