Asking Info about Conditions of CVE-2024-28887

[MH_K]

I read an advisory, so I'd like to ask about the condition that the problems of CVE-2024-28887 may happen.

I'm using Intel® IPP software before version 2021.11 which I installed in "C:\Windows\System32\System32".
Is there any possibility that Intel® IPP software may allow escalation of privilege?

[Ruqiu_C_Intel · Accepted solution]

Hi,

Thank you for raising your question.

If you are using the older version than 2021.11, Intel recommends updating Intel® IPP software to version 2021.11 or later.

Updates are available for download at this location: 

https://www.intel.com/content/www/us/en/developer/tools/oneapi/ipp.html#gs.6xkls2

Intel recommends updating Intel® oneAPI Base Toolkit software version 2024.1 or later.

Updates are available for download at this location: 

https://www.intel.com/content/www/us/en/developer/tools/oneapi/toolkits.html#base-kit

Regards,

Ruqiu​

[MH_K]

Thank you for your reply and info.