Description
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.
Published: 2026-10-13
Score: 7.3 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service with potential data tampering and disclosure
Action: Patch Now
AI Analysis

Impact

The vulnerability in NVIDIA DALI is an uncontrolled out‑of‑bounds write that can corrupt memory. An attacker who successfully exploits this flaw could cause a denial of service, expose sensitive data, or alter the output data being processed. The type of weakness is a classic buffer overflow (CWE‑787).

Affected Systems

The affected product is NVIDIA DALI. Specific vulnerable versions are not listed in the advisory, so any deployment of DALI may be impacted. Users should verify their installed version against NVIDIA’s release notes.

Risk and Exploitability

The CVSS score of 7.3 indicates a high‑severity flaw. EPSS is not available and the vulnerability is not listed in CISA’s KEV catalog, suggesting no known widespread exploitation to date. The attack vector is inferred as likely through malicious input supplied to DALI functions, which can trigger the out‑of‑bounds write. Because the flaw can lead to denial of service, information disclosure, and data tampering, the overall risk to confidentiality, integrity, and availability is significant.

Generated by OpenCVE AI on October 13, 2026 at 16:47 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest NVIDIA DALI release that includes the fix for the out‑of‑bounds write.
  • If an update cannot be applied immediately, validate and sanitize all input streams before they reach DALI functions to enforce strict bounds checking.
  • Run DALI with the least privileges necessary and consider containerizing or isolating it from sensitive data sources.
  • Monitor system logs and process behavior for signs of memory corruption, and reboot if anomalies are detected.

Generated by OpenCVE AI on October 13, 2026 at 16:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Nvidia
Nvidia dali
Vendors & Products Nvidia
Nvidia dali

Tue, 13 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Title Uncontrolled Out‑of‑Bounds Write in NVIDIA DALI Leading to Denial of Service, Information Disclosure, and Data Tampering

Tue, 13 Oct 2026 13:00:00 +0000

Type Values Removed Values Added
Description NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Nvidia Dali
cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2026-10-15T19:14:58.538Z

Reserved: 2026-07-21T17:28:38.792Z

Link: CVE-2026-65149

cve-icon Vulnrichment

Updated: 2026-10-15T19:11:53.246Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-13T13:17:32.460

Modified: 2026-10-15T20:17:14.007

Link: CVE-2026-65149

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-13T21:15:16Z

Weaknesses