{"id":"CVE-2026-50109","kind":"vulnerability","aliases":["CVE-2026-50109"],"related":[],"title":"Intel PCM: out-of-bounds write lets user-mode code crash the system","description":"Out-of-bounds write for some Intel(R) Performance Counter Monitor (Intel(R) PCM) within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via network access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Intel Performance Counter Monitor has an out-of-bounds write reachable from Ring 3 user applications. An unauthenticated attacker with network access can cause a denial of service.","severity":"high","cvss":8.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Intel Performance Counter Monitor (PCM)","fixed":["commit d626ea0 (April 30, 2026) or later"],"affected":"before commit d626ea0 (April 30, 2026)","ecosystem":"vendor"}],"ecosystems":[],"tags":["denial-of-service","intel-pcm","linux","package","windows"],"not_affected_if":[],"how_to_check":"Check your Intel PCM build: if it was built from a source checkout or package older than commit d626ea0 (April 30, 2026) it is affected. In a git checkout: git merge-base --is-ancestor d626ea0 HEAD (exit 0 means the fix is included). Also check whether a distro package or container image bundles an older PCM.","fix":"Update Intel PCM to a build that includes commit d626ea0 (April 30, 2026) or later, from https://github.com/intel/pcm. Intel names no release tag.","status":"open","published_at":"2026-11-10T17:17:44+00:00","first_seen_at":"2026-11-10T17:22:43+00:00","triaged_at":"2026-11-10T17:23:55+00:00","updated_at":"2026-11-10T17:25:26+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-10T17:23:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Intel PCM: out-of-bounds write lets user-mode code crash the system","impact":"medium","summary":"Intel Performance Counter Monitor has an out-of-bounds write reachable from Ring 3 user applications. An unauthenticated attacker with network access can cause a denial of service.","audience":"businesses","category":"package","nicknames":[],"who_cares":["intel-pcm","linux","windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Denial of service crashing the affected system","analyst_note":"Find the affected Intel PCM versions and fixed release in Intel's advisory linked from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-50109).","how_to_check":"unknown","plain_action":"","product_name":"Intel Performance Counter Monitor","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems running Intel Performance Counter Monitor (Intel PCM) tools or libraries, where the flaw is reachable from user-mode applications over the network. The sources do not list affected versions or the exact configuration that exposes it. unknown","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000704,"input_tokens":4670,"output_tokens":473,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected Intel PCM versions and fixed release in Intel's advisory linked from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-50109).","search":"'-2026':17A,20A '-50109':18A,21A '3':51B,83C 'access':59B,117C 'adversari':94C 'allow':87C 'applic':53B,85C 'attack':56B,104C,119C 'avail':143C,158C 'bound':6A,46B,69C 'caus':61B 'code':12A 'combin':99C 'complex':103C 'confidenti':138C,153C 'counter':24A,39B,76C 'crash':13A 'cve':16A,19A 'denial':28B,63B,89C,107C 'denial-of-servic':27B 'enabl':106C 'high':144C 'impact':136C,160C 'integr':140C,155C 'intel':1A,22A,32B,37B,73C,78C 'intel-pcm':31B 'interact':131C 'intern':125C 'knowledg':126C 'let':8A 'linux':34B 'low':102C,141C 'may':86C,105C,112C,135C 'mode':11A 'monitor':25A,40B,77C 'network':58B,116C 'none':139C,154C,156C,159C 'occur':114C 'out-of-bound':3A,43B,66C 'packag':35B 'pcm':2A,26A,33B,80C 'perform':38B,75C 'performance':23A 'potenti':113C,133C 'present':122C 'r':74C,79C 'reachabl':48B 'requir':120C,128C 'result':111C,149C 'ring':50B,82C 'servic':30B,65B,91C,109C 'softwar':93C 'special':124C 'subsequ':151C 'system':15A,148C,152C 'unauthent':55B,97C 'unprivileg':92C 'user':10A,52B,84C,98C,130C 'user-mod':9A 'via':115C 'vulner':134C,147C 'window':36B 'within':81C 'without':123C 'write':7A,47B,70C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Intel Performance Counter Monitor (Intel PCM) built from source older than commit d626ea0 of April 30, 2026, on Linux or Windows. Intel rates it as a network-reachable, unauthenticated denial of service (out-of-bounds write); it needs no user interaction. Intel does not say which PCM component listens on the network, so check hosts where PCM tools or its exporter are reachable from other machines. Teams that do not use PCM, or only run an updated build, can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T17:25:26Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01528.html","run_id":2475},"products":{"at":"2026-11-10T17:25:26Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01528.html","run_id":2475},"how_to_check":{"at":"2026-11-10T17:25:26Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01528.html","run_id":2475},"who_affected":{"at":"2026-11-10T17:25:26Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01528.html","run_id":2475}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["intelperformancecountermonitorpcm","performancecountermonitorpcm"],"ptokens":["counter","intel","monitor","pcm","performance"],"labels":["denialofservice","high","intelpcm","linux","package","windows"],"campaign_type":null,"search_a":"'-2026':17A,20A '-50109':18A,21A 'bound':6A 'code':12A 'counter':24A 'crash':13A 'cve':16A,19A 'intel':1A,22A 'let':8A 'mode':11A 'monitor':25A 'out-of-bound':3A 'pcm':2A,26A 'performance':23A 'system':15A 'user':10A 'user-mod':9A 'write':7A","search_b":"'3':51B 'access':59B 'applic':53B 'attack':56B 'bound':46B 'caus':61B 'counter':39B 'denial':28B,63B 'denial-of-servic':27B 'intel':32B,37B 'intel-pcm':31B 'linux':34B 'monitor':40B 'network':58B 'out-of-bound':43B 'packag':35B 'pcm':33B 'perform':38B 'reachabl':48B 'ring':50B 'servic':30B,65B 'unauthent':55B 'user':52B 'window':36B 'write':47B","search_c":"'3':83C 'access':117C 'adversari':94C 'allow':87C 'applic':85C 'attack':104C,119C 'avail':143C,158C 'bound':69C 'combin':99C 'complex':103C 'confidenti':138C,153C 'counter':76C 'denial':89C,107C 'enabl':106C 'high':144C 'impact':136C,160C 'integr':140C,155C 'intel':73C,78C 'interact':131C 'intern':125C 'knowledg':126C 'low':102C,141C 'may':86C,105C,112C,135C 'monitor':77C 'network':116C 'none':139C,154C,156C,159C 'occur':114C 'out-of-bound':66C 'pcm':80C 'perform':75C 'potenti':113C,133C 'present':122C 'r':74C,79C 'requir':120C,128C 'result':111C,149C 'ring':82C 'servic':91C,109C 'softwar':93C 'special':124C 'subsequ':151C 'system':148C,152C 'unauthent':97C 'unprivileg':92C 'user':84C,98C,130C 'via':115C 'vulner':134C,147C 'within':81C 'without':123C 'write':70C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:44+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-50109","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50109","severity":null,"published_at":"2026-11-10T17:17:44+00:00","modified_at":"2026-11-10T17:17:44+00:00","first_seen_at":"2026-11-10T17:22:43+00:00","fetched_at":"2026-11-10T17:22:43+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-50109:2475","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01528.html","severity":null,"published_at":"2026-11-10T17:25:26+00:00","modified_at":"2026-11-10T17:25:26+00:00","first_seen_at":"2026-11-10T17:25:26+00:00","fetched_at":"2026-11-10T17:25:26+00:00","note":"Read Intel INTEL-SA-01528 (released 2026-11-10, HIGH, CVSS 4.0 8.3). Affected: PCM before commit d626ea0 (Apr 30 2026); fix = that commit or later from github.com/intel/pcm. No release tag named; no exploitation or PoC seen; social search skipped (B tier, brand new).","cites":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01528.html"]}],"documents":[{"id":116640,"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01528.html","title":"INTEL-SA-01528: Intel PCM Software Advisory","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}