CVE-2022-40974

Incomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access.

Score

CVSS 3.1 5.5 Medium

Status

Modified - secure@intel.com

Published

2023-05-10

Last modified

2025-01-27

Weaknesses

CWE-459

Affected products

• Integrated Performance Primitives Cryptography (Intel)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00788.html