This vulnerability arises from the deserialization of untrusted data within Intel(R) Extension for PyTorch versions prior to 2.8.0, specifically in user applications operating in Ring 3. An unauthenticated, unprivileged local attacker with low attack complexity and active user interaction could exploit this flaw to escalate privileges. The vulnerability affects confidentiality, integrity, and availability at a low level but does not lead to further system-wide impacts. No known exploits are reported in the wild, and no official remediation or patch has been indicated in the vendor advisory or CVE data.

The vulnerability may allow an unprivileged local attacker to escalate privileges with low complexity and active user interaction. The impact on confidentiality, integrity, and availability is low, and no further system-level impacts are expected. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or remediation level has been published. Until a patch is available, limit local access to trusted users and avoid executing untrusted data within Intel(R) Extension for PyTorch environments.