3.3
Low
CVE-2023-48727 NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to…
Description
NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure via local access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intel(R) oneVPL software | Versions not published | |
| media_sdk | Versions not published | |
| onevpl_gpu_runtime 23.3 | earliest → < 23.3.5 | 23.3.5 |