CVE-2022-26083

Published: Feb 14, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Exploitability: 1.1 / Impact: 5.8

Source: secure@intel.com (Secondary)

Description

Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.

Affected (1)

Products: Intel: Integrated Performance Primitives Cryptography

Intel

1 product

Integrated Performance Primitives Cryptography

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Intel Integrated Performance Primitives Cryptography	Before 2021.5

Related CWEs

CWE-1204

Generation of Weak Initialization Vector (IV)

The product uses a cryptographic primitive that uses an Initialization Vector (IV), but the product does not generate IVs that are sufficiently unpredictable or unique according to the expected cryptographic requirements for that primitive.

References (1)

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html

Source: secure@intel.com

Vendor Advisory

Timeline

No history available yet.