Out-of-Bounds Read in Intel NPU Driver for User Applications

CVE-2026-20786

What is CVE-2026-20786?

An out-of-bounds read vulnerability exists in the Intel NPU Driver affecting all versions within user applications. This flaw can potentially allow an unprivileged software adversary who has authenticated access to launch a denial of service attack. Notably, this vulnerability can be exploited locally without requiring special internal knowledge or user interaction, which raises significant concerns about the system's availability. Addressing this vulnerability is crucial to maintain the integrity and continual operation of affected systems.

References