CVE-2024-23909

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
n/a	Intel(R) FPGA SDK for OpenCL(TM) software technology	See references
intel	field_programmable_gate_array_software_development_kit_for_opencl	< *

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.htmlVendor Advisory

Timeline

Published: Aug 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-23916.1A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic. Affected by this issue is some unknown functionality of the comp CVE-2024-239108.8Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated att CVE-2024-239117.5Out-of-bounds read vulnerability caused by improper checking of the option length values in IPv6 NDP packets exists in Cente middleware TCP/CVE-2024-239124.0Out-of-bounds Read vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_File() function is used to read a malformed DICOM da CVE-2024-239134.0Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows. When deprecated MC_XML_To_Message() function is u CVE-2024-239145.7Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_Association() function is us CVE-2024-239157.5Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vu CVE-2024-239167.5Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vu CVE-2024-239179.8In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible CVE-2024-239188.8Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX may allow a privileged CVE-2024-239195.3Improper buffer restrictions in some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privileg CVE-2024-23926.4The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Newsletter widget in all versions u