Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.4

Intel IPP Software Escalation of Privileges Via Local Access

CVE-2024-28887 · published 2 years ago
Summary

Some versions of Intel's IPP software have a security flaw that could allow a person with local access to gain more permissions on the system. This means they could potentially do things they shouldn't be able to do. Update to the latest version of Intel IPP software to fix this issue.

What to do
  • Update intel integrated_performance_primitives to version 2021.11 or later.
  • Update intel oneapi_base_toolkit to version 2024.1 or later.
Affected software
VendorProductAffected versions
intel integrated_performance_primitives < 2021.11
cpe:2.3:a:intel:integrated_performance_primitives:*:*:*:*:*:*:*:*
intel oneapi_base_toolkit < 2024.1
cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*
Original advisory text
Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
5.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-427Uncontrolled Search Path Element
Timeline
Published14 Aug 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-28887 · NVD
Track software like this
Free during beta