CVE-2022-25905

HIGH 7.3CVE-2022-25905 · Published 16/02/2023 · updated 17/06/2026

In short

CVE-2022-25905 is a HIGH (CVSS 7.3) vulnerability affecting oneapi data analytics library (intel).
Chance of exploitation in the next 30 days (EPSS): 0.17%, higher than 6.5% of all vulnerabilities.
Fix: update to 2021.5 or later.

Package	Affected versions	Patched versions
oneapi data analytics library intel	`< 2021.5`	`2021.5`

Description

Uncontrolled search path element in the Intel(R) oneAPI Data Analytics Library (oneDAL) before version 2021.5 for Intel(R) oneAPI Base Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html · Vendor Advisory

More vulnerabilities in oneapi data analytics library

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free