The vulnerability in NVIDIA DALI allows an attacker to trigger an uncontrolled out-of-bounds read within the library. This flaw can expose sensitive data, corrupt data paths, or cause the application to crash, resulting in denial of service. It arises from a buffer over-read identified as CWE‑125.

Vendors: NVIDIA. Product: DALI library. No specific affected versions are listed, so any installation of NVIDIA DALI may contain the flaw.

The CVSS score of 7.3 indicates a high-risk vulnerability that requires swift attention. The EPSS score is not provided, so the current exploitation probability cannot be quantified. The threat is not listed in the CISA KEV catalog. Based on the description, the exploit requires the attacker to supply malformed input that causes the library to read beyond the bounds of allocated memory; if that input can reach the vulnerable component remotely, a remote attacker could potentially read sensitive data or crash the application. The attack vector is not explicitly stated in the advisory, so it is inferred that the vulnerability could be exploitable where untrusted input is processed by the component.