CVE-2025-33030: Low severity Intel NPU Drivers vulnerability
Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data corruption. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33030?
CVE-2025-33030 is classified as a moderate severity vulnerability due to potential privilege escalation and data corruption risks.
How does CVE-2025-33030 allow for privilege escalation?
CVE-2025-33030 allows privilege escalation by enabling unprivileged software to exploit improper conditions checks within Intel NPU Drivers.
What impact can CVE-2025-33030 have on affected systems?
CVE-2025-33030 can lead to data corruption and allows an authenticated adversary to potentially execute malicious operations.
Who is affected by CVE-2025-33030?
CVE-2025-33030 affects users of specific Intel NPU Drivers, particularly in scenarios involving authenticated, low complexity attacks.
What are the recommended mitigation strategies for CVE-2025-33030?
To mitigate CVE-2025-33030, users should update their Intel NPU Drivers to the latest version provided by Intel.