CVE catalog

CVE-2023-48727

intel-mediasdk: CVE-2023-48727

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.23% · Oct 27, 2026

NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure via local access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianintel-mediasdkbookworm22.5.4-1vulnerable
Debianonevpl-intel-gpusid26.3.3-1fixed
Debianonevpl-intel-gpuforky26.3.3-1fixed
Debianonevpl-intel-gputrixie25.1.4-1fixed
Debianonevpl-intel-gpubookworm22.6.4-1vulnerable
Ubuntuonevpl22.042022.0.4-1vulnerable
Ubuntuonevpl22.042022.1.0-2vulnerable
Ubuntuonevpl24.042023.3.0-1vulnerable
Ubuntuonevpl24.042023.3.0-1build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianintel-mediasdksourcebookworm(unfixed)not yet assignedNot reported[1082866]
Debianonevpl-intel-gpusourcesid24.3.3-1not yet assignedNot reported[1082867]
Debianonevpl-intel-gpusourceforky24.3.3-1not yet assignedNot reported[1082867]
Debianonevpl-intel-gpusourcetrixie24.3.3-1not yet assignedNot reported[1082867]
Debianonevpl-intel-gpusourcebookworm(unfixed)not yet assignedNot reported[1082867]

[Debian bug #1082866][Debian bug #1082867]

Notes

[bookworm] intel-mediasdk: No specific details published, development stalled and scheduled for removal from Debian [bookworm] onevpl-intel-gpu: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libmfx1]Affected

    Source package: [intel-mediasdk]

    Details (1)

    • 22.5.4-1 · amd64 · bookworm

      Affected

      dsa · intel-mediasdk · debian · bookworm; dsa · intel-mediasdk · debian · 12

  • [libmfx-dev]Affected

    Source package: [intel-mediasdk]

    Details (1)

    • 22.5.4-1 · amd64 · bookworm

      Affected

      dsa · intel-mediasdk · debian · bookworm; dsa · intel-mediasdk · debian · 12

  • [libmfx-gen1.2]Affected

    Source package: [onevpl-intel-gpu]

    Details (1)

    • 22.6.4-1 · amd64 · bookworm

      Affected

      dsa · onevpl-intel-gpu · debian · bookworm; dsa · onevpl-intel-gpu · debian · 12

  • [libmfx-gen-dev]Affected

    Source package: [onevpl-intel-gpu]

    Details (1)

    • 22.6.4-1 · amd64 · bookworm

      Affected

      dsa · onevpl-intel-gpu · debian · bookworm; dsa · onevpl-intel-gpu · debian · 12

  • [libmfx-tools]Affected

    Source package: [intel-mediasdk]

    Details (1)

    • 22.5.4-1 · amd64 · bookworm

      Affected

      dsa · intel-mediasdk · debian · bookworm; dsa · intel-mediasdk · debian · 12

[Debian 13 (Trixie)]

  • [libmfx-gen1.2]Fixed

    Source package: [onevpl-intel-gpu]

    Details (1)

    • 25.1.4-1 · amd64 · trixie

      Fixed · Fixed: 24.3.3-1

      dsa · onevpl-intel-gpu · debian · 13

  • [libmfx-gen-dev]Fixed

    Source package: [onevpl-intel-gpu]

    Details (1)

    • 25.1.4-1 · amd64 · trixie

      Fixed · Fixed: 24.3.3-1

      dsa · onevpl-intel-gpu · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]