K20031768 : Intel hardware vulnerabilities CVE-2020-8737 CVE-2020-12312

Security Advisory Description

• CVE-2020-8737

Improper buffer restrictions in the Intel® Stratix® 10 FPGA firmware provided with the Intel® Quartus® Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access.

• CVE-2020-12312

Improper buffer restrictions in the Intel® Stratix® 10 FPGA firmware provided with the Intel® Quartus® Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Impact

There is no impact; F5 products are not affected by this vulnerability.