PT-2025-46424 · Intel · Intel Oneapi Math Kernel Library

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-31948

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Intel oneAPI Math Kernel Library versions prior to 2025.2

Description The software contains an improper input validation issue within Ring 3: User Applications that may allow for a denial of service. An unprivileged software adversary with an authenticated user and a low complexity attack may enable denial of service. This may occur via local access when attack requirements are not present, without special internal knowledge, and requires no user interaction. The issue may impact the availability of the vulnerable system.

Recommendations Update to version 2025.2 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-31948

Affected Products

Intel Oneapi Math Kernel Library

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-31948 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01366.html · Note
• https://twitter.com/CVEnew/status/1988303457451962856 · Twitter Post