CVEvulnerability

CVE-2022-42878

5.5 MEDIUM Published 2023-05-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.8 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-395, CWE-476

Description

Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable information disclosure via local access.

Affected configurations

• intel oneapi hpc toolkit (< 2023.0.0) • intel trace analyzer and collector (< 2021.8.0)

Related

Weakness · CWE (2)

  • CWE-395 Use of NullPointerException Catch to Detect NULL Pointer Dereference weakness
  • CWE-476 NULL Pointer Dereference weakness

References