CVE-2024-28030

EUVD-2024-25203
NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial of service via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.2 LOW
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 7.37%
Debian logo
Debian Releases
Debian Product
Codename
intel-mediasdk
bookworm
ignored
bullseye
vulnerable
onevpl-intel-gpu
bookworm
ignored
forky
26.1.2-1.1
fixed
sid
26.1.2-1.1
fixed
trixie
25.1.4-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
intel-mediasdk
focal
ignored
jammy
needs-triage
noble
needs-triage
oracular
ignored
plucky
dne
questing
dne
resolute
dne
onevpl-intel-gpu
focal
dne
jammy
needs-triage
noble
needs-triage
oracular
not-affected
plucky
not-affected
questing
not-affected
resolute
not-affected
Common Weakness Enumeration
References
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01131.html