SecuriTricks - CVE-2024-21808

Description

Improper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

Product(s) Impacted

Product	Versions
Intel VPL software	['before 24.1.4']

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-92

DEPRECATED: Improper Sanitization of Custom Special Characters

This entry has been deprecated. It originally came from PLOVER, which sometimes defined "other" and "miscellaneous" categories in order to satisfy exhaustiveness requirements for taxonomies. Within the context of CWE, the use of a more abstract entry is preferred in mapping situations. CWE-75 is a more appropriate mapping.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01131.html

CVSS Score

4.2 / 10

CVSS Data - 3.1

Attack Vector: LOCAL
Attack Complexity: HIGH
Privileges Required: LOW
Scope: UNCHANGED
Confidentiality Impact: LOW
Integrity Impact: LOW
Availability Impact: LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

View Vector String

Timeline

Published: Nov. 13, 2024, 9:15 p.m.
Last Modified: Nov. 15, 2024, 2 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

secure@intel.com

CVE-2024-21808