Denial of Service Vulnerability in Intel NPU Drivers
CVE-2026-32672

6.8MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Npu Drivers
Vendor
CVE Published:
10 November 2026

What is CVE-2026-32672?

A null pointer dereference vulnerability exists in the Intel NPU Drivers prior to version 32.0.100.4778. This flaw enables an unauthenticated adversary, possessing access rights, to launch a denial of service attack. The attack can occur locally, requiring no user interaction and minimal expertise. While the flaw does not compromise system confidentiality or integrity, it may significantly impact system availability, resulting in service disruptions.

Affected Version(s)

Intel(R) NPU Drivers before version 32.0.100.4778

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.