Intel oneVPL Software Vulnerability Could Lead to Information Disclosure

CVE-2023-48727

What is CVE-2023-48727?

A vulnerability exists in Intel oneVPL software that allows an authenticated user to exploit a NULL pointer dereference, resulting in the potential for information disclosure. This issue may occur before version 23.3.5 and poses risks when local access is gained by a malicious user. The nature of the vulnerability highlights the need for timely software updates and rigorous security practices in safeguarding sensitive information.

References