CVE-2026-44627

An integer overflow could disrupt oneDNN workloads

Intel · oneAPI Deep Neural Network Library

First documented disclosure · Review checkpoint

Summary

An arithmetic overflow could lead to a buffer overflow in the neural-network library. A workload could stop, with potential effects on data confidentiality and integrity.

Severity and exploitation evidence

Medium · 5.8/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

An arithmetic overflow could lead to a buffer overflow in the neural-network library.

Conditions required

A local authenticated user could supply input under the conditions described by Intel.

Potential impact

A workload could stop, with potential effects on data confidentiality and integrity.

Affected versions and configurations

Offline library and Base Toolkit before 2026.0.0. Standalone oneDNN before 3.11.2.

Fix and mitigation status

Offline library and Base Toolkit 2026.0.0. Standalone oneDNN 3.11.2.

Practical next steps

Update the package that supplies oneDNN in the deployment.

Operating lesson

Check the installed component and distribution channel when matching a model workload to a driver or library fix.

Evidence and limits

The CVE record was published on 2026-11-10.

Sources