CVE-2025-32038

MediumCVSS 6.7/10Last modified Oct 19, 2026

Description

Uncontrolled search path for some FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software before version 2025.0.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Nov 11, 2025
Last modified
Oct 19, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-32049.8A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this issue is some unknownCVE-2025-320447.5A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contCVE-2025-320455.3A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permiCVE-2025-320497.5A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory anCVE-2025-32058.8A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an unknown part of the fiCVE-2025-320505.9A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read.CVE-2025-320515.9A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows CVE-2025-320526.5A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.CVE-2025-320536.5A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer overCVE-2025-320543.3In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log fileCVE-2025-320564.0The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possiblCVE-2025-320576.5The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning