CVE-2023-22338: Medium severity intel vpl vulnerability
Published Aug 11, 2023
·Updated
Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via local access.
Affected Software
4 affected components
Intel Onevpl Gpu Runtime<22.6.5
Fedoraproject Fedora=37
Fedoraproject Fedora=38
Fedoraproject Fedora=39
Event History
Aug 11, 2023
CVE Published
02:37 AM
Data Sourced
02:37 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-22338.
2
What is the severity of this vulnerability?
The severity of this vulnerability is medium with a severity value of 5.5.
3
What software is affected by this vulnerability?
The Intel Onevpl Gpu Runtime software versions up to 22.6.5 are affected by this vulnerability.
4
How can an authenticated user potentially exploit this vulnerability?
An authenticated user may be able to enable information disclosure via local access.
5
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Intel Security Center Advisory page: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00818.html