Intel Media SDK Vulnerability Could Lead to Escalation of Privilege
CVE-2023-47282

3.9LOW

Key Information:

Vendor

Intel
Status
Intel(r) Onevpl Software
Vendor
CVE Published:
16 May 2024

What is CVE-2023-47282?

Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected Version(s)

Intel(R) oneVPL software before version 23.3.5

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
3.9
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.