Integer Overflow Vulnerability in Intel oneAPI Deep Neural Network Library
CVE-2026-44627

5.8MEDIUM

What is CVE-2026-44627?

An integer overflow in Intel's oneAPI Deep Neural Network Library (oneDNN) prior to version v2026.0.0 may lead to a buffer overflow situation affecting user applications. This vulnerability can be exploited by an unprivileged adversary who gains authenticated user access and conducts a low-complexity attack, resulting in potential denial of service conditions. Exploitation may occur through local access without the need for special internal knowledge and does not require user interaction. The incident compromises system availability, while posing minimal risks to confidentiality and integrity.

Affected Version(s)

Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before version v2026.0.0

References

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.