4.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2024-21783

CVE-2024-21783: Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated...

Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2024-21783

CVE-2024-21783:

4.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is described as an integer overflow in Intel VPL software before version 24.1.4. I analyzed the commits between version 24.1.3 and the patched version 24.1.4 of the intel/vpl-gpu-rt repository. One commit, 9f8a9ac15952d3dee24e73b8a3a3a07adf4563f0, titled "[Decode] JPEG bitstream copy parameter check", directly addresses potential issues with parameter checks before a memory copy operation in the UMC::MJPEGVideoDecoderMFX_HW::PackHeaders function. The added checks obtainedScanParams->DataOffset + (uint32_t)src->GetDataSize() > src->GetBufferSize() and obtainedScanParams->DataOffset + obtainedScanParams->DataLength > src->GetBufferSize() are typical mitigations for integer overflows that could occur when calculating buffer offsets or lengths for memory operations. An overflow in these calculations could lead to std::copy operating on memory outside the intended bounds, which aligns with the nature of an integer overflow vulnerability that could lead to further exploitation like buffer overflows. The other commits in this range were less relevant to an integer overflow vulnerability leading to privilege escalation; for example, commit c810b03e35924dd58fb03d061adcb7365c32822d addressed uninitialized value comparisons, which is a different class of bug. Therefore, UMC::MJPEGVideoDecoderMFX_HW::PackHeaders is identified as the vulnerable function.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.