CVE-2024-22476

Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.

Affected

Intel(R) Neural Compressor software

CVSS v3.1 INTEL

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

35.97% chance of exploitation in the next 30 days, 98th percentile

Nuclei

critical · CWE-20

Published

2024-05-16

Updated

2024-08-01

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22476.yaml

References

• CVE Record
• NVD entry