What is CVE-2022-25987?

CVE-2022-25987 is a high-severity vulnerability in Intel C\+\+ Compiler Classic. CVSS score: 8.3/10. Published 2023-02-16.

How severe is CVE-2022-25987?

High severity. CVSS v3 base score is 8.3 out of 10.

Vulnerability in Intel C\+\+ Compiler Classic

CVE-2022-25987

Improper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler Classic before version 2021.6 for Intel(R) oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

EPSS: 0.005 (41.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Intel C\+\+_compiler_classic
Intel Oneapi_toolkits
N/a Intel(r) C++ Compiler Classic — versions before version 2021.6

References

secure@intel.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-25987?: CVE-2022-25987 is a high-severity vulnerability in Intel C\+\+ Compiler Classic. CVSS score: 8.3/10. Published 2023-02-16.
How severe is CVE-2022-25987?: High severity. CVSS v3 base score is 8.3 out of 10.