PT-2025-46409 · Intel · Intel Neural Compressor

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-27712

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Intel(R) Neural Compressor versions prior to 3.4

Description A flaw exists in some Intel(R) Neural Compressor software that may allow an escalation of privilege. An unprivileged software adversary with an authenticated user and a low complexity attack may exploit this issue. This could occur via local access when attack requirements are not present, without special internal knowledge, and requires active user interaction. The issue may potentially impact the confidentiality, integrity, and availability of the vulnerable system, but subsequent impacts to these areas are none.

Recommendations Update to version 3.4 or later.

Fix

Improper Neutralization

Weakness Enumeration

CWE-707

Related Identifiers

CVE-2025-27712

Affected Products

Intel Neural Compressor

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-27712 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01365.html · Note
• https://twitter.com/CVEnew/status/1988303472241033507 · Twitter Post