Denial of Service Vulnerability in Intel Neural Compressor Software

CVE-2026-50177

What is CVE-2026-50177?

A vulnerability exists in Intel Neural Compressor software versions prior to 3.8, enabling a denial of service due to the deserialization of untrusted data. An unprivileged adversary with authenticated access could exploit this flaw using a low-complexity attack, which may lead to disruption of service. Notably, the attack could be initiated with local access and does not require any special internal knowledge or user interaction. This vulnerability primarily affects the operational availability of the system, while other security facets such as confidentiality and integrity remain largely unaffected.

References