CVE-2022-26083

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-26083

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-26083.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-26083

Published

2025-02-14T21:15:11Z

Modified

2026-08-27T08:15:16Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N CVSS Calculator

Summary

[none]

Details

Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html

Affected packages

Git / github.com/intel/cryptography-primitives

Affected ranges

Type

GIT

Repo

https://github.com/intel/cryptography-primitives

Events

Introduced

Fixed

2b8c5c82c87e3fe37f132f632557367d9bc8a69b

Database specific

Show details

{
    "cpe": "cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2021.5"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

Other

ippcp_2019b_r

ippcp_2020u2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-26083.json"