CVE-2026-20783

Source
https://cve.org/CVERecord?id=CVE-2026-20783
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-20783.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-20783
Downstream
Published
2026-08-11T17:17:52Z
Modified
2026-09-02T11:45:25Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
Summary
[none]
Details

Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Database specific
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:intel:neural_processing_unit_driver:*:*:*:*:*:windows:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "32.0.100.4723"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "intel:neural_processing_unit_driver"
        }
    ]
}
References

Affected packages

Git / github.com/intel/linux-npu-driver

Affected ranges

Type
GIT
Repo
https://github.com/intel/linux-npu-driver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Database specific
Show details
{
    "cpe": "cpe:2.3:a:intel:neural_processing_unit_driver:*:*:*:*:*:linux:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.32.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v1.*
v1.1.0
v1.10.0
v1.10.1
v1.13.0
v1.16.0
v1.17.0
v1.19.0
v1.2.0
v1.22.0
v1.23.0
v1.24.0
v1.26.0
v1.28.0
v1.30.0
v1.5.0
v1.5.1
v1.6.0
v1.8.0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-20783.json"