EUVD-2026-29525
GHSA-p3jx-g75c-5w33
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local vector with low-privilege requirement matches description; no scope change; high availability impact on NPU subsystem only with minimal integrity effect.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
AnalysisAI
Denial of service in Intel Neural Processing Unit (NPU) firmware drivers (Ring 1: Device Drivers) allows a low-privileged local user to crash or impair NPU availability through an improper conditions check (CWE-754). Affected are systems running Intel NPU Drivers as identified under Intel Security Advisory INTEL-SA-01424. No public exploit or active exploitation has been identified; EPSS is 0.01% (3rd percentile) and CISA SSVC rates exploitation as none - making this a low-urgency patching item despite the driver-level impact.
Technical ContextAI
The vulnerability resides in Intel NPU firmware at the Ring 1 (device driver) privilege layer, which sits between the hardware and the operating system kernel. CWE-754 (Improper Check for Unusual or Exceptional Conditions) indicates the driver firmware fails to properly validate edge-case or error conditions during normal operation, allowing a crafted or unexpected input sequence to reach an unchecked state and trigger a denial-of-service condition - likely a driver hang, reset, or crash. Intel Neural Processing Units are silicon-level AI accelerators integrated into modern Intel SoCs (e.g., Meteor Lake, Lunar Lake, Arrow Lake generations). The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N) confirms the flaw is locally triggerable with low privileges, produces high availability impact on the vulnerable system (NPU subsystem), and has no subsequent-system impact - meaning the broader OS is not directly compromised. The CPE cpe:2.3:a:n/a:intel(r)_npu_drivers:*:*:*:*:*:*:*:* covers all versions, suggesting the advisory scope may be broad across driver release lines.
RemediationAI
The primary remediation is to apply the updated Intel NPU Driver package identified in Intel Security Advisory INTEL-SA-01424 at https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01424.html - exact fixed version numbers are not present in this dataset and must be confirmed from that advisory. Intel NPU Driver updates are typically distributed via Intel Driver and Support Assistant (DSA), Windows Update, or OEM firmware channels depending on the platform. As a compensating control pending patching, organizations where NPU functionality is non-critical may disable the Intel NPU device in Device Manager (Windows) or unload the NPU kernel module (Linux) to eliminate the attack surface - the trade-off is loss of hardware-accelerated AI inference. For environments where the NPU is required, restricting local user execution rights (preventing untrusted code from running in user context) reduces exploitation opportunity since the attack requires PR:L. There are no network-level mitigations applicable given the local-only attack vector.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today