CVE-2022-35883 Null dereference in Intel(R) Media SDK software

Low 2.2 Published 16 Feb 2023 Updated 27 Jan 2025

An authenticated local attacker can cause a denial of service via a NULL pointer dereference in the Intel Media SDK library.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2022-35883?

CVE-2022-35883 is a low-severity vulnerability in Intel(R) Media SDK software, published on 16 Feb 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

NULL pointer dereference in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access.

Weakness: CWE-476

Which versions are affected by CVE-2022-35883?

It affects 1 product.

Products include Intel Media Software Development Kit.

How do I fix CVE-2022-35883?

Upgrade to a fixed version.

Is CVE-2022-35883 being exploited?

There is no known exploitation of CVE-2022-35883 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2022-35883, GHSA-fq74-8wx7-rfjm, UBUNTU-CVE-2022-35883.