Uncontrolled Search Path Vulnerability in Libva Software Could Lead to Escalation of Privilege

CVE-2023-39929

What is CVE-2023-39929?

An uncontrolled search path vulnerability exists in Intel's Libva software that could allow authenticated users to execute arbitrary code. This flaw arises from insufficient validation of search paths during execution, potentially enabling privilege escalation via local access. Users and organizations utilizing versions of Libva prior to 2.20.0 are advised to apply patches or upgrade to the latest version to mitigate the risks associated with this vulnerability. For detailed remediation, refer to Intel's advisory.

References