Weak Initialization Vector in Intel IPP Cryptography Library

CVE-2022-26083

Summary

The Intel IPP Cryptography software library prior to version 2021.5 exhibits a vulnerability due to the generation of weak initialization vectors. This issue allows an unauthorized user with local access to potentially exploit this weakness, leading to information disclosure. It emphasizes the importance of using updated versions of the library to mitigate risks associated with security vulnerabilities.

References