{
  "cveId": "CVE-2023-47282",
  "url": "https://patchblox.com/security/cve/CVE-2023-47282",
  "summary": "CVE-2023-47282 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2023-47282, released May 16, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "onevpl-intel-gpu: Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may al...",
  "description": "Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.",
  "published": "2024-05-16T21:16:00Z",
  "severity": "low",
  "cvss": 3.9,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
  "epss": 0.00236,
  "epssPercentile": 0.14769,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libvpl",
      "release": "sles 15.6",
      "fixedVersion": "2023.0.0-150500.3.2.1",
      "fix": "SUSE-SU-2024:3289-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3289-1",
      "released": "2024-09-17T12:27:10Z"
    },
    {
      "platform": "linux",
      "product": "onevpl-intel-gpu",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "24.3.3-1",
      "fix": "DEBIAN-CVE-2023-47282",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-47282",
      "released": "2024-05-16T21:16:00Z"
    },
    {
      "platform": "linux",
      "product": "onevpl-intel-gpu",
      "release": "Debian 14",
      "fixedVersion": "24.3.3-1",
      "fix": "DEBIAN-CVE-2023-47282",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-47282",
      "released": "2024-05-16T21:16:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}