Intel IPP Cryptography Library Weak Initialization Vector Vulnerability Allowing Information Disclosure

A vulnerability exists in the Intel IPP Cryptography software library prior to version 2021.5, where weak initialization vectors could be generated. This flaw may enable an unauthenticated user to potentially disclose information through local access.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users are advised to update the Intel IPP Cryptography software to version 2021.5 or later. The latest version can be downloaded from the Intel IPP Cryptography GitHub releases page.