CVE-2024-21784

Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.

Score

CVSS 3.1 7.8 High

Status

Analyzed - secure@intel.com

Published

2024-08-14

Last modified

2024-08-19

Weaknesses

CWE-427

Affected products

• Integrated Performance Primitives Cryptography (Intel)
• Ipp Cryptography (Intel)
• Oneapi Base Toolkit (Intel)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01114.html