Intel Neural Compressor vulnerabilities

Improper input validation in Intel(R) Neural Compressor software before version v3.7 may allow an escalation of privilege. An unprivileged attacker with an authenticated user and a low complexity attack may enable privilege escalation. The attack requires local access, no user interaction, and may impact confidentiality, integrity, and availability.

Protection mechanism failure in Intel(R) Neural Compressor software before version v3.6 may allow an escalation of privilege. An attacker with a privileged user and a low complexity attack may enable privilege escalation. The attack requires local access, passive user interaction, and may impact confidentiality, integrity, and availability.

Intel(R) Neural Compressor software before version v3.4 contains improper neutralization in Ring 3 (user applications) that may allow privilege escalation. The attack requires an authenticated user, local access, and active user interaction.