Improper Input Validation in Intel Software for User Applications

CVE-2025-24299

What is CVE-2025-24299?

The vulnerability originates from improper input validation within specific Intel User Applications software prior to version WIN_DCA_2.4.0.11001. This flaw allows an authenticated, unprivileged adversary to exploit the system. Attackers can potentially escalate their privileges through low-complexity attacks, which may require network access and can be executed without special internal knowledge or user interaction. Consequently, the weakness poses significant risks to the confidentiality, integrity, and availability of affected systems.

References