CVE-2026-65148
Awaiting Analysis Awaiting Analysis - Queue

Stack-Based Buffer Overflow in NVIDIA DALI

Vulnerability report for CVE-2026-65148, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: NVIDIA Corporation

Description

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
NVIDIA DALI 0.0-2.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

NVIDIA DALI has a stack-based buffer overflow vulnerability. This flaw allows an attacker to write beyond the intended memory limits, potentially leading to unauthorized code execution, sensitive data exposure, data manipulation, or system crashes.

Detection Guidance

Detection requires checking the installed version of NVIDIA DALI against vulnerable versions. Use commands like 'pip show nvidia-dali' or 'conda list nvidia-dali' to check the installed version. Compare it with the latest patched version from NVIDIA's official sources.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious code on your system, steal or alter sensitive data, or disrupt services by causing denial of service. It primarily affects systems using NVIDIA DALI.

Compliance Impact

This vulnerability could lead to information disclosure, data tampering, and denial of service, which may violate GDPR's data protection requirements and HIPAA's integrity and confidentiality rules if exploited.

Mitigation Strategies

Update NVIDIA DALI to the latest patched version immediately. Monitor for unusual system behavior and restrict access to affected systems until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65148. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart