CVE-2023-22338

Name of the Vulnerable Software and Affected Versions Intel oneVPL GPU versions prior to 22.6.5

Description The issue is related to an out-of-bounds read in the Intel oneVPL GPU software, which can potentially allow an authenticated user to enable information disclosure via local access. This is due to a buffer overflow in memory.

Recommendations For versions prior to 22.6.5, update to version 22.6.5 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.