CVE-2019-14629

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
Intel	Intel(R) DAAL	before version 2020 Gold

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00332.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00332.htmlPatch, Vendor Advisory

Timeline

Published: Jan 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-14635.5An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, ak CVE-2019-146304.6Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potential CVE-2019-14645.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In CVE-2019-14656.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows CVE-2019-146526.1explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certain circumstances.CVE-2019-146536.1pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.CVE-2019-146548.8In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inj CVE-2019-146568.8Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account (with a password CVE-2019-146578.8Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the CVE-2019-14666.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows CVE-2019-146625.5Brandy 1.20.1 has a stack-based buffer overflow in fileio_openout in fileio.c via crafted BASIC source code.CVE-2019-146635.5Brandy 1.20.1 has a stack-based buffer overflow in fileio_openin in fileio.c via crafted BASIC source code.