CVE-2024-22476: Input Validation
Improper input validation in some Intel(R) Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Intel Neural Compressorto a version that resolves this vulnerability.Fixed in 2.5.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22476?
CVE-2024-22476 is considered a high severity vulnerability due to improper input validation allowing possible privilege escalation.
How do I fix CVE-2024-22476?
To remediate CVE-2024-22476, upgrade the Intel Neural Compressor software to version 2.5.0 or later.
Who is affected by CVE-2024-22476?
CVE-2024-22476 affects users of Intel Neural Compressor software versions prior to 2.5.0.
What type of vulnerability is CVE-2024-22476?
CVE-2024-22476 is categorized as an input validation vulnerability.
Can CVE-2024-22476 be exploited remotely?
Yes, CVE-2024-22476 can potentially be exploited by an unauthenticated remote user to escalate privileges.