7.0
High
CVE-2024-39766 Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before…
Description
Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) Neural Compressor software | Versions not published | |
| neural_compressor_software 3.0 | earliest → < 3.0 | 3.0 |
Other CVEs of Intel(R) Neural Compressor software
The 10 CVEs of Intel(R) Neural Compressor software →
CVE-2026-20913
Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User…
4.8
Medium
CVE-2026-20906
Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User…
5.4
Medium
CVE-2025-27712
Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User…
5.7
Medium
CVE-2024-37181
Time-of-check time-of-use race condition in some Intel(R) Neural Compressor software before version v3.0 may allow an…
2.6
Low