CVE-2022-41646

MEDIUM

Intel(R) IPP Cryptography <2021.6 - Info Disclosure

Title source: llm
STIX 2.1

Description

Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable information disclosure via local access.

References (1)

Scores

CVSS v3 4.7
EPSS 0.0014
EPSS Percentile 33.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-691
Status published
Products (1)
intel/integrated_performance_primitives_cryptography < 2021.6
Published May 10, 2023
Tracked Since Feb 18, 2026