CVE-2026-60141
Received Received - Intake

Null Termination Flaw in Intel Metrics Discovery API

Publication date: 2026-11-10

Last updated on: 2026-11-10

Assigner: Intel Corporation

Description
Improper null termination for some Intel(R) Metrics Discovery Application Programming Interface before version 1.16.189 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-10
Last Modified
2026-11-10
Generated
2026-11-10
AI Q&A
2026-11-10
EPSS Evaluated
N/A
NVD
CVE-2026-60141
EUVD
EUVD-2026-121687

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel metrics_discovery_application_programming_interface to 1.16.189 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-170 The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper null termination in Intel's Metrics Discovery API before version 1.16.189. It allows a denial of service attack by an unprivileged adversary with authenticated user access. The attack requires low complexity and no user interaction, exploiting local access with special internal knowledge.

Detection Guidance

This vulnerability is specific to Intel Metrics Discovery API before version 1.16.189. Detection involves checking the installed version of the API on your system. Use commands like 'find / -name "libmdapi.so" 2>/dev/null' to locate the library and 'strings libmdapi.so | grep "1.16.189"' to check the version. If the version is older, the system is vulnerable.

Impact Analysis

The vulnerability may cause a denial of service, disrupting system availability. It does not directly impact confidentiality or integrity but could lead to system unavailability, affecting normal operations.

Mitigation Strategies

Update the Intel Metrics Discovery API to version 1.16.189 or later. Download the latest version from Intel's official website and replace the existing library. Ensure no applications are running that depend on the old version during the update. Verify the update by rechecking the library version.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-60141. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...