CVE-2023-47282: Intel Media SDK

Low severity, CVSS 3.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

• Intel Media SDK: affected versions not specified
• Intel Onevpl GPU Runtime: before 23.3.5 (fixed in 23.3.5)

Published 2024-05-16. Last modified 2026-06-17.