CVE-2022-26083 HIGH

CVE-2022-26083

Vendor N/A
Product Intel(R) IPP Cryptography software library
Weakness CWE-1204
Published February 14, 2025
Last update February 18, 2025

CVSS base score

7.5/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.

Key dates

02Disclosure timeline

February 14, 2025 CVE published
February 18, 2025 Record updated