PT-2025-46409 · Intel · Intel Neural Compressor

CVE-2025-27712 · Publicado 2025-11-11 · Atualizado 2025-11-11

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Intel(R) Neural Compressor versions prior to 3.4

Description A flaw exists in some Intel(R) Neural Compressor software that may allow an escalation of privilege. An unprivileged software adversary with an authenticated user and a low complexity attack may exploit this issue. This could occur via local access when attack requirements are not present, without special internal knowledge, and requires active user interaction. The issue may potentially impact the confidentiality, integrity, and availability of the vulnerable system, but subsequent impacts to these areas are none.

Recommendations Update to version 3.4 or later.

Correção

Improper Neutralization

Enumeração de Fraquezas

CWE-707

Identificadores relacionados

CVE-2025-27712

Produtos afetados

Intel Neural Compressor

Referências · 3

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01365.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-27712 · Nota de Segurança
• https://twitter.com/CVEnew/status/1988303472241033507 · Publicação no Twitter