CVE-2026-65102: Integer Overflow
NVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by supplying crafted tensor dimensions in a YAML configuration file. A successful exploit of this vulnerability might lead to denial of service, information disclosure, data tampering.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
DeepStream deployments are exposed when they process YAML configuration files whose tensor dimensions can be supplied or modified by a local attacker with low privileges. The listed attack vector is local, so it is not described as remotely exploitable over the network.
What does an attacker need to exploit it?
An attacker needs low-privileged local access and the ability to supply a crafted YAML configuration containing malicious tensor dimensions. No user interaction is required according to the provided severity vector.
What impact could successful exploitation have?
Successful exploitation may cause denial of service, information disclosure, or data tampering. The severity vector rates confidentiality, integrity, and availability impacts as high.