{"data":{"id":"dcaebbce-0ded-43c8-afe5-e685a6515ac6","title":"CVE-2026-35502: Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Appli","summary":"Intel's Extension for PyTorch before version 2.8.0 has a vulnerability involving deserialization of untrusted data (processing data from unverified sources without proper validation), which could allow a local user to gain higher privileges on a system. An attacker would need local access and the user to interact with the software, but the actual security impact on the system is expected to be low.","solution":"Update Intel(R) Extension for PyTorch to version 2.8.0 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-35502","publishedAt":"2026-08-11T17:17:58.097Z","cveId":"CVE-2026-35502","cweIds":["CWE-502"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["model_poisoning"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Intel Extension for PyTorch"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-11T17:17:58.097Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}