Uncontrolled Search Path Vulnerability in Intel High Level Synthesis Compiler

CVE-2024-23907

What is CVE-2024-23907?

An uncontrolled search path vulnerability exists in Intel High Level Synthesis Compiler software prior to version 23.4, which may allow an authenticated user with local access to execute code or escalate their privileges. This issue poses significant security risks for systems utilizing affected versions of the compiler, enabling potential exploitation scenarios that could compromise system integrity and confidentiality. Users are advised to update to the latest version to mitigate the risks associated with this vulnerability.

References