5.7
Medium
CVE-2023-49614 Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege…
Description
Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege and information disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) FPGA products | Versions not published | |
| agilex_7_fpga_f-series_006_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_f-series_008_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_f-series_012_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_f-series_019_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_f-series_022_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_f-series_023_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_i-series_019_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_i-series_022_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
Show the 8 other branches Hide the 8 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| agilex_7_fpga_i-series_023_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_i-series_027_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_i-series_040_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_i-series_041_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_f-series_014_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_f-series_027_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_i-series_035_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
| agilex_7_fpga_m-series_039_firmware 2.9 | earliest → < 2.9.0 | 2.9.0 |
Other CVEs of Intel(R) FPGA products
The 5 CVEs of Intel(R) FPGA products →
CVE-2024-25576
improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to…
7.9
High
CVE-2024-22390
Improper input validation in firmware for some Intel(R) FPGA products before version 2.9.1 may allow denial of service
4.4
Medium
CVE-2023-22327
Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to…
6.0
Medium
CVE-2022-38787
Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an…
5.7
Medium