CVE-2026-20786
published 2026-08-11CVE-2026-20786: Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary…
PriorityP426medium6.1CVSS 3.1
AVLACLPRLUINSUCNILAH
EPSS
0.13%
2.7th percentile
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | neural_processing_unit_driver | < 1.32.0 | 1.32.0 |
| intel | neural_processing_unit_driver | < 32.0.100.4723 | 32.0.100.4723 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
nvdv4.06.9MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.
ghsa_unreviewed·2026-08-11
CVE-2026-20786 [MEDIUM] CWE-125 Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Red Hat
intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read
vendor_redhat·2026-08-11·CVSS 6.9
CVE-2026-20786 [MEDIUM] CWE-125 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read
intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
A flaw was found in the Intel NPU Driver. This vulnerability, an ou
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read [epel-all]
bugzilla·2026-08-20·CVSS 6.9
CVE-2026-20786 [MEDIUM] CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read [epel-all]
CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidential
Bugzilla
CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read [fedora-all]
bugzilla·2026-08-20·CVSS 6.9
CVE-2026-20786 [MEDIUM] CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read [fedora-all]
CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidenti
Bugzilla
CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read
bugzilla·2026-08-11·CVSS 6.9
CVE-2026-20786 [MEDIUM] CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read
CVE-2026-20786 intel-npu-driver: Intel NPU Driver: Denial of service via out-of-bounds read
Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
2026-08-11
Published