CVE-2026-44627: Intel oneDNN integer overflow to buffer overflow in Ring 3 user applications

Summary

CVE-2026-44627 is an integer overflow leading to a buffer overflow in some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before version v2026.0.0, reachable from Ring 3 user applications. An unprivileged, authenticated local user can trigger a denial of service with a low-complexity attack that needs no user interaction. The reported impact is low confidentiality and integrity loss and high availability loss, with no subsequent system impact.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• MediumGHSA-h7c4-q426-7jh9: tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clientsSimilar attack · GitHub Advisory Database
• HighGHSA-4p8p-pjpq-2w7h: tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP processSimilar attack · GitHub Advisory Database
• HighGHSA-447x-qqwf-m7xq: tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoSSimilar attack · GitHub Advisory Database
• LowChatter Attack: Resource Consumption Attack for Large Language ModelsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-123356: GROBID unauthenticated thread exhaustion through /api/modelTraining endpointSimilar attack · NVD/CVE Database