CVE-2024-22476 Privilege escalation in Intel(R) Neural Compressor software
An unauthenticated attacker can escalate privileges remotely due to improper input validation in Intel Neural Compressor.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-22476?
CVE-2024-22476 is a critical vulnerability in Intel(R) Neural Compressor software, published on 16 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.
Weakness: CWE-20
Which versions are affected by CVE-2024-22476?
How do I fix CVE-2024-22476?
No fix has been published for CVE-2024-22476 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-22476 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-22476 exists.
Public exploit code: 1 Nuclei template.
Sources
Also known as GHSA-4mgq-xc5h-f57m.