CVE-2023-45221

2024-05-1620:47:40

CWE-119

intel

github.com

intel media sdk

buffer restrictions

privilege escalation

authenticated user

local access

CVSS3

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

7.3

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Improper buffer restrictions in Intel® Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Media SDK",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ],
    "defaultStatus": "unaffected"
  }
]