CVE-2022-26083: intel integrated_performance_primitives_cryptography

Vulnerability summary

CVE-2022-26083 is a high (CVSS 7.5) vulnerability in intel integrated_performance_primitives_cryptography. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.2% of scored vulnerabilities.

Timeline

1. 14-02-2025
   PublishedVulnerability first disclosed.
2. 18-02-2025
   Last modifiedVulnerability information updated.

Description

Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.

• CWE-1204Generation of Weak Initialization Vector (IV)The product uses a cryptographic primitive that uses an Initialization Vector (IV), but the product does not generate IVs that are sufficiently unpredictable or unique according to the expected cryptographic requirements for that primitive.