Deserialization Vulnerability in Intel Neural Compressor Software

CVE-2026-42917

What is CVE-2026-42917?

A deserialization vulnerability has been identified in Intel Neural Compressor software versions prior to 3.8, which may allow a denial of service. An unprivileged software adversary, who has authenticated user access, could exploit this vulnerability through a low complexity attack. While the attack requires local access, it does not necessitate special internal knowledge or user interaction. If successfully exploited, this may lead to service interruptions, impacting the availability of the system, although the integrity and confidentiality are not directly compromised.

References