PatchTheCVEoneapi base toolkit vulnerabilities and fixes
Recent CVEs affecting oneapi base toolkit, with upgrade or downgrade steps. 13 tracked.
Also searched as: oneapibasetoolkit.
oneapi base toolkit has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-05-13. Highest priority: CVE-2024-39284 (score 26/100).
- CVE-2025-20079 MEDIUM 6.7 UPGRADE UPGRADE Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially ena
- CVE-2024-39284 MEDIUM 6.7 UPGRADE UPGRADE Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated u
- CVE-2024-37027 MEDIUM 6.1 UPGRADE UPGRADE Improper Input validation in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an au
- CVE-2024-36245 MEDIUM 6.7 UPGRADE UPGRADE Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allo
- CVE-2024-29015 MEDIUM 6.7 UPGRADE UPGRADE Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an auth
- CVE-2024-28952 MEDIUM 6.7 UPGRADE UPGRADE Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an auth
- CVE-2024-28887 MEDIUM 6.7 UPGRADE UPGRADE Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user
- CVE-2024-26025 MEDIUM 6.7 UPGRADE UPGRADE Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authentica
- CVE-2024-25562 MEDIUM 5.8 UPGRADE UPGRADE Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow
- CVE-2024-24973 LOW 2.2 UPGRADE UPGRADE Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an
- CVE-2024-23495 MEDIUM 6.7 UPGRADE UPGRADE Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow
- CVE-2024-23491 MEDIUM 6.7 UPGRADE UPGRADE Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an a
- CVE-2024-21784 MEDIUM 6.7 UPGRADE UPGRADE Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authe
FAQ
How do I fix oneapi base toolkit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is oneapi base toolkit being exploited right now?
None of the tracked oneapi base toolkit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which oneapi base toolkit CVE should I patch first?
CVE-2024-39284 currently ranks highest (26/100): Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated u.