Potential Escalation of Privilege via Local Access in Intel oneAPI Math Kernel Library
CVE-2024-21766

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Oneapi Math Kernel Library Software
Vendor
CVE Published:
14 August 2024

What is CVE-2024-21766?

Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected Version(s)

Intel(R) oneAPI Math Kernel Library software before version 2024.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.