Out-of-Bounds Read in Hyperscan Affects User Applications by Intel
CVE-2026-40424

5.9MEDIUM

Key Information:

Vendor

Intel

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-40424?

A vulnerability in Intel's Hyperscan prior to version v5.4.2.1 allows an out-of-bounds read through user applications. This could enable a denial of service by an unprivileged adversary with local access, requiring no user interaction. Although the attack model is low complexity, it poses potential risks to system availability, while impacts on confidentiality and integrity are minimal. Users of affected versions should consider applying updates to mitigate any potential exposure.

Affected Version(s)

Hyperscan before version v5.4.2.1

References

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.