8.0
High
CVE-2024-39368 Improper neutralization of special elements used in an SQL command ('SQL Injection') in some Intel(R) Neural…
Description
Improper neutralization of special elements used in an SQL command ('SQL Injection') in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) Neural Compressor software | Versions not published | |
| neural_compressor_software 3.0 | earliest → < 3.0 | 3.0 |
Other CVEs of Intel(R) Neural Compressor software
The 10 CVEs of Intel(R) Neural Compressor software →
CVE-2026-20913
Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User…
4.8
Medium
CVE-2026-20906
Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User…
5.4
Medium
CVE-2025-27712
Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User…
5.7
Medium
CVE-2024-37181
Time-of-check time-of-use race condition in some Intel(R) Neural Compressor software before version v3.0 may allow an…
2.6
Low