CVE-2023-22313
14.11.2023, 19:15
Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.Enginsight
| Vendor | Product | Version |
|---|---|---|
| intel | quickassist_technology_library | 𝑥 < 22.07.1 |
| intel | quickassist_technology_driver_firmware | 𝑥 < 2.04 |
| intel | qat_driver_firmware | 𝑥 < 1.10 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-92 - DEPRECATED: Improper Sanitization of Custom Special CharactersThis entry has been deprecated. It originally came from PLOVER, which sometimes defined "other" and "miscellaneous" categories in order to satisfy exhaustiveness requirements for taxonomies. Within the context of CWE, the use of a more abstract entry is preferred in mapping situations. CWE-75 is a more appropriate mapping.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.