CVE-2024-22476criticalCWE-20

CVE-2024-22476: critical vulnerability in Intel(R) Neural Compressor software

Published · Updated

55Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 10epss 36%
exploitation probability
36%top 2% of all CVEs
observed exploitation
nono source reports it
Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H