CVE-2022-26425

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Uncontrolled search path element in the Intel(R) oneAPI Collective Communications Library (oneCCL) before version 2021.6 for Intel(R) oneAPI Base Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

VendorProductVersions
n/aIntel(R) oneAPI Collective Communications Library (oneCCL) for Intel(R) oneAPI Base Toolkitbefore version 2021.6

References

Timeline

Published
Feb 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-264266.7In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with CVE-2022-264276.7In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with CVE-2022-264286.4In video codec, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System CVE-2022-264297.8In cta, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escaCVE-2022-26439.8A vulnerability has been found in SourceCodester Online Admission System and classified as critical. This vulnerability affects unknown codeCVE-2022-264306.7In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execCVE-2022-264316.7In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysCVE-2022-264326.7In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysCVE-2022-264336.7In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execCVE-2022-264346.7In mailbox, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with SysCVE-2022-264356.7In mailbox, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execCVE-2022-264364.4In emi mpu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with Syste
CVE-2022-26425: High severity, CVSS 7.3 | Vulnix