SB2026021328 - Multiple vulnerabilities in Intel NPU Driver



SB2026021328 - Multiple vulnerabilities in Intel NPU Driver

Published: February 13, 2026

Security Bulletin ID SB2026021328
Severity
Low
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2025-32735)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper conditions check in some firmware. A local user can send specially crafted data to the application and perform a denial of service (DoS) attack.


2) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2025-35992)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper conditions check in some firmware. A local user can send specially crafted data to the application and perform a denial of service (DoS) attack.


3) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2025-33030)

The vulnerability allows a local user to escalate privileges on the target system.

The vulnerability exists due to improper conditions check in some firmware. A local user can gain elevated privileges on the system.


Remediation

Install update from vendor's website.