Improper Buffer Restrictions in Intel NPU Driver Impacting User Applications
CVE-2026-20731

6.9MEDIUM

Key Information:

Vendor

Intel

Vendor
CVE Published:
11 August 2026

What is CVE-2026-20731?

The Intel NPU Driver is susceptible to vulnerabilities caused by improper buffer restrictions within user applications. This vulnerability may allow unprivileged software adversaries to execute low-complexity attacks that can lead to a denial of service. The attack only requires authenticated user access, enabling the adversary to potentially disrupt service availability during exploitation. Notably, the attack can be executed without user interaction and does not necessitate extensive knowledge or specialized tools. Consequently, this vulnerability raises concerns regarding the availability of affected systems.

Affected Version(s)

Intel(R) NPU Driver all versions

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.