Privilege Escalation Vulnerability in libva Software by Intel
CVE-2026-56438

5.4MEDIUM

Key Information:

Vendor

Intel

Vendor
CVE Published:
10 November 2026

What is CVE-2026-56438?

The libva software from Intel is affected by a privilege escalation vulnerability that arises from an uncontrolled search path within user applications. This security flaw can be exploited by an unprivileged adversary, requiring authenticated user access and the execution of a high-complexity attack. An attack may be executed locally, contingent on the presence of specific conditions and active user participation. The exploitation of this vulnerability poses significant risks, potentially jeopardizing the confidentiality, integrity, and availability of the affected systems.

Affected Version(s)

libva software all versions

References

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.