PT-2024-19060 · Intel · Intel Neural Compressor

Published 2024-05-16 · Updated 2024-05-17 · CVE-2024-21792

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Neural Compressor versions prior to 2.5.0

Description A Time-of-check Time-of-use race condition may allow an authenticated user to potentially enable information disclosure via local access.

Recommendations For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2024-21792

Affected Products

Intel Neural Compressor

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-21792 · Security Note
• https://twitter.com/CVEnew/status/1791215616310816929 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html · Note