CVE-2024-37181

LOW

Intel(R) Neural Compressor <v3.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

Time-of-check time-of-use race condition in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable information disclosure via adjacent access.

References (1)

Scores

CVSS v3 2.6
EPSS 0.0004
EPSS Percentile 10.9%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-367
Status published
Products (1)
n/a/Intel(R) Neural Compressor software before version v3.0
Published Jan 16, 2025
Tracked Since Feb 18, 2026