Home / CVE DB / CVE-2025-31948
Standard
Vulnerability Identifier

CVE-2025-31948

2025-11-11
Severity Assessment
3.3
LOW
CVSS v3.x Score
Clinical Analysis (Description)

Improper input validation for some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Vector Sequencing

Attack Parameters

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Impact Consequences

Technical Impact

Unchanged
Scope
None
Confidentiality
None
Integrity
Low
Availability
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness Classification

CWE-CWE-20

Timeline

Time Line

PUBLICATION
11 Nov 2025
MODIFICATION
12 Nov 2025
FIRST PATCH
21 Apr 2026
Impact Statistics

Key Metrics

CVSS Score
3.3
LOW
Patches
1
Available
Remediation Protocol

Recommended Solution

No automatic solution found. Check vendor references.
Recommended Actions for Administrators

Immediate Action Plan

1. Inventory

Identify all affected systems in your infrastructure.

2. Assessment

Assess exposure and criticality for your organization.

3. Mitigation

Apply patches or available workarounds.

4. Verification

Test and confirm effectiveness of applied measures.