Information Disclosure Vulnerability in Intel IPP Cryptography Software

CVE-2022-40974

What is CVE-2022-40974?

An incomplete cleanup issue within Intel(R) IPP Cryptography software prior to version 2021.6 allows privileged users to potentially gain access to sensitive information through local access methods. This could lead to significant security concerns as unauthorized users may exploit the vulnerability to retrieve confidential data stored in memory.

References