PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-65147 NVIDIA CVE debrief

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service. The vulnerability affects NVIDIA DALI versions 0.0-2.2. Defenders responsible for systems using NVIDIA DALI should assess their exposure and prioritize verification and potential remediation. This vulnerability was reported by an external party and has been publicly disclosed. There are no known instances of exploitation at this time.

Vendor
NVIDIA
Product
DALI
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-13
Original CVE updated
2026-10-13
Advisory published
2026-10-13
Advisory updated
2026-10-13

Who should care

Defenders responsible for systems using NVIDIA DALI, especially those in environments where information disclosure and denial of service could have significant impacts, should assess their exposure and prioritize verification and potential remediation.

Why it matters

Defenders should care about CVE-2026-65147 because it involves an uncontrolled out-of-bounds read in NVIDIA DALI, potentially leading to information disclosure and denial of service. Systems using NVIDIA DALI versions 0.0-2.2 are affected, and defenders should verify their exposure, assess the need for updates or patches, and prioritize remediation if necessary.

  • Information disclosure may occur if exploited
  • Denial of service may occur if exploited
  • Verification of system configurations and NVIDIA DALI versions is necessary
  • Remediation priority may be required for affected systems

Technical summary

The vulnerability in NVIDIA DALI allows an attacker to cause an uncontrolled out-of-bounds read, potentially leading to information disclosure and denial of service. The affected versions are 0.0-2.2. The vulnerability was reported through a CVE Program record and has been assessed by NIST. There are no additional details on exploitation or affected systems beyond NVIDIA DALI versions 0.0-2.2.

Defensive priority

Defenders should prioritize verifying the vulnerability's impact on their systems, especially those using NVIDIA DALI versions 0.0-2.2, and assess the need for updates or patches.

Recommended defensive actions

  • Verify NVIDIA DALI version and assess exposure
  • Review system configurations for potential vulnerability
  • Monitor for updates or patches from NVIDIA

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability, with no additional details on exploitation or affected systems beyond NVIDIA DALI versions 0.0-2.2.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-65147 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-65147

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-65147 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-65147

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • CVE-2026-65147

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/65xxx/CVE-2026-65147.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://github.com/NVIDIA/product-security/tree/main/2026/5900

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.