Uncontrolled Search Path Vulnerability in Intel oneAPI DPC++C++ Compiler Software

CVE-2025-32038

What is CVE-2025-32038?

The Intel oneAPI DPC++C++ Compiler software is susceptible to an uncontrolled search path vulnerability, which may allow an unprivileged authenticated user to escalate privileges. This vulnerability arises due to a flaw in the handling of user applications and requires local access alongside a complex attack strategy. The attack could be executed without significant internal knowledge, although it necessitates active interaction from the user. If successfully exploited, this could severely impact the system's confidentiality, integrity, and availability.

References