Description
Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access.
References (1)
Core 1
Core References
Patch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00957.html
Scores
CVSS v3
6.0
EPSS
0.0009
EPSS Percentile
24.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-787
Status
published
Products (48)
intel/agilex_7_fpga_f-series_006_firmware
< 2.8.1
intel/agilex_7_fpga_f-series_008_firmware
< 2.8.1
intel/agilex_7_fpga_f-series_012_firmware
< 2.8.1
intel/agilex_7_fpga_f-series_014_firmware
< 2.8.1
intel/agilex_7_fpga_f-series_019_firmware
< 2.8.1
intel/agilex_7_fpga_f-series_022_firmware
< 2.8.1
intel/agilex_7_fpga_f-series_023_firmware
< 2.8.1
intel/agilex_7_fpga_f-series_027_firmware
< 2.8.1
intel/agilex_7_fpga_i-series_019_firmware
< 2.8.1
intel/agilex_7_fpga_i-series_022_firmware
< 2.8.1
... and 38 more
Published
Nov 14, 2023
Tracked Since
Feb 18, 2026