Out of Bounds Write Vulnerability in Intel FPGA Products
CVE-2023-49614

5.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Fpga Products
Vendor
CVE Published:
16 May 2024

What is CVE-2023-49614?

A vulnerability exists in the firmware of certain Intel FPGA products that allows for out of bounds write operations. This flaw can potentially lead to escalation of privileges and exposure of sensitive information. The affected firmware versions must be updated to mitigate the risk associated with this vulnerability. It is essential for users to ensure that they are running the latest version to protect their devices from potential exploitation.

Affected Version(s)

Intel(R) FPGA products before version 2.9.0

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-49614 : Out of Bounds Write Vulnerability in Intel FPGA Products