CVE-2024-23907: High severity intel high level synthesis compiler vulnerability
Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23907?
CVE-2024-23907 has been classified with a medium severity level due to the potential for privilege escalation.
How do I fix CVE-2024-23907?
To fix CVE-2024-23907, upgrade to Intel High Level Synthesis Compiler version 23.4 or later, or to a suitable version of the affected Intel software.
Who is affected by CVE-2024-23907?
CVE-2024-23907 affects users of Intel High Level Synthesis Compiler, Intel oneAPI dpc++/c++ compiler, and Intel Quartus Prime versions prior to 23.4.
Can CVE-2024-23907 be exploited remotely?
CVE-2024-23907 requires local access for exploitation, as it is not inherently a remote vulnerability.
What types of attacks can be enabled by CVE-2024-23907?
CVE-2024-23907 can potentially allow authenticated users to escalate their privileges on affected systems.