# CVE-2026-56438: Intel libva uncontrolled search path privilege escalation

Source: https://junglewise.ai/threats/cve-2026-56438-uncontrolled-search-path-for-the-libva-software-for-all-versions  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-56438 · Severity: info · Published 2026-11-10

libva is a video acceleration library used by graphics drivers and media applications. An attacker with local user access and user interaction could manipulate the search path to load malicious libraries, gaining the ability to execute code with the privileges of the application using libva, potentially compromising system confidentiality and integrity.

Technologies: [Intel Graphics Driver for Arc graphics](https://junglewise.ai/threats/technologies/graphics-driver-for-arc-graphics), [Intel Graphics Driver for Arc Pro graphics](https://junglewise.ai/threats/technologies/graphics-driver-for-arc-pro-graphics). Vendors: [Intel](https://junglewise.ai/threats/vendors/intel).

## Quick answers

**Is CVE-2026-56438 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-56438 being exploited in the wild.

**How severe is CVE-2026-56438?** Informational severity, published 10 November 2026.

**Which products and versions are affected?** Intel Graphics Driver for 11th-14th Gen Core processor family before 32.0.101.7088; Intel Graphics Driver for Arc graphics before 32.0.101.8801; Intel Graphics Driver for Arc Pro graphics before 32.0.101.8804; Intel Libva before 2.24.0.

**Is there a fix for CVE-2026-56438?** Yes: fixed in libva 2.24.0; Intel Graphics Driver for Arc graphics 32.0.101.8801 (includes Graphics Software 26.14.2303.1); Intel Graphics Driver for Arc Pro graphics 32.0.101.8804 (includes Graphics Software 26.14.2303.1); Intel Graphics Driver for 11th-14th Gen Core processor family 32.0.101.7088 (includes Graphics Software 26.14.2303.1). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-56438 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-56438?** Check whether you run Intel Graphics Driver for 11th-14th Gen Core processor family, Intel Graphics Driver for Arc graphics, Intel Graphics Driver for Arc Pro graphics or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in libva 2.24.0; Intel Graphics Driver for Arc graphics 32.0.101.8801 (includes Graphics Software 26.14.2303.1); Intel Graphics Driver for Arc Pro graphics 32.0.101.8804 (includes Graphics Software 26.14.2303.1); Intel Graphics Driver for 11th-14th Gen Core processor family 32.0.101.7088 (includes Graphics Software 26.14.2303.1)

## Technical details

Uncontrolled search path vulnerability in libva software allows an authenticated local user to trigger privilege escalation through high-complexity attack involving user interaction. An attacker can manipulate the library search path to inject and load malicious libraries, potentially gaining code execution with application privileges. The vulnerability affects libva versions before 2.24.0 and requires active user interaction to trigger.

## Affected products

- Intel libva before 2.24.0
- Intel Graphics Driver for Arc graphics before 32.0.101.8801
- Intel Graphics Driver for Arc Pro graphics before 32.0.101.8804
- Intel Graphics Driver for 11th-14th Gen Core processor family before 32.0.101.7088

## Timeline

- 2026-11-10: advisory

## References

- [https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01513.html](https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01513.html)

## Related threats

- [Intel Arc B-series graphics device driver deadlock denial of service](https://junglewise.ai/threats/cve-2026-21407-deadlock-for-some-intel-r-arc-tm-b-series-graphics-cards-within)
- [Intel Graphics Driver privilege escalation in software installers](https://junglewise.ai/threats/cve-2026-20880-incorrect-default-permissions-for-some-intel-r-graphics-driver)
- [Intel Graphics Driver uncontrolled search path privilege escalation](https://junglewise.ai/threats/cve-2026-20798-uncontrolled-search-path-for-some-intel-r-graphics-driver)