Improper Input Validation in Intel oneAPI Math Kernel Library Affects User Applications
CVE-2025-31948
Key Information:
- Vendor
Intel
- Vendor
- CVE Published:
- 11 November 2025
What is CVE-2025-31948?
The Intel oneAPI Math Kernel Library prior to version 2025.2 is susceptible to an improper input validation vulnerability that may lead to denial of service in user applications. An attacker with unprivileged access can exploit this flaw locally, leveraging a low complexity attack. The attack does not require special knowledge or user interaction, accentuating the ease of exploitation. While the threat does not compromise confidentiality or integrity, it can disrupt the availability of the affected system, resulting in service interruptions for users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Intel(R) oneAPI Math Kernel Library before version 2025.2
References
CVSS V4
Timeline
Vulnerability published
Vulnerability Reserved