Intel Open VKL Heap Buffer Overflow DoS Vulnerability (CVE-2026-21399) Advisory

Intel Open VKL Advisory Vulnerability Summary Intel ID: INTEL-SA-01459 CVE ID: CVE-2026-21399 Vulnerability Type: Software Impact: Denial of Service Severity: Medium Publication Date: August 11, 2026 Last Revision: August 11, 2026 Abstract A potential security vulnerability in the Intel Open Volume Kernel Library (Intel Open VKL) software could lead to denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details Description: The Intel Open Volume Kernel Library (Intel Open VKL) library contains a heap buffer overflow vulnerability in versions prior to 2.0.2. User applications may allow for denial of service. A system software attacker, leveraging a low-complexity attack via local access without special internal knowledge or user interaction, could lead to denial of service. This potential vulnerability may impact system confidentiality (None), integrity (Low), and availability (High), resulting in subsequent impacts on system confidentiality (None), integrity (None), and availability (None). CVSS Base Score: 6.9 Medium CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/S:N/SA:N Affected Products Affected Product: Intel Open VKL prior to version 2.0.2 Remediation Recommendation: Intel recommends updating Intel Open VKL to version 2.0.2 or later. Update Download: Updates are available for download at: https://github.com/RenderKit/openvkl/releases Acknowledgments Intel thanks Chavda Balvant (balvant.in) for reporting this issue. Revision History Revision: 1.0 Date: August 11, 2026 Description: Initial release

Goal Reached Thanks to every supporter — we hit 100%!

Intel Open VKL Heap Buffer Overflow DoS Vulnerability (CVE-2026-21399) Advisory