High
Security advisory
Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2023-35121
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:27 UTC · Revision 1
Source evidence
Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access.
osv:CVE-2023-35121
Complete source record
{
"id": "fc42cabd0bb180b48d219bdac17137b1c8daa46d76173f3347f6a69288dfadba",
"url": "https://osv.dev/vulnerability/CVE-2023-35121",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2023-35121",
"summary": "Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access.",
"evidence": "osv:CVE-2023-35121",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2023-35121",
"aliases": [
"CVE-2023-35121"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/intel/cryptography-primitives",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "97d2971a96bb7b956fcd8d974473895792fb5d49"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2021.8"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"ippcp_2021.6",
"ippcp_2020u2",
"ippcp_2019b_r"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-35121.json",
"vanir_signatures": [
{
"id": "CVE-2023-35121-27c6e874",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92411580549792240037218625153283900331",
"289680804558791396632982514072465192234",
"201458262534278118876101318616557868404",
"192446105232127691745664544555874685784",
"175294666694457286068558870837950227617",
"237320911071954256293864585027033186625",
"32532888009923476264725620132440192325",
"334453055986288735985178034407799190408",
"153605835245356250583040921535281214242"
]
},
"source": "https://github.com/intel/cryptography-primitives/commit/97d2971a96bb7b956fcd8d974473895792fb5d49",
"target": {
"file": "sources/ippcp/pcprsa_getdefmeth_priv.h"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2023-35121-2e0d4393",
"digest": {
"length": 950,
"function_hash": "215158707616295665237892560316043699406"
},
"source": "https://github.com/intel/cryptography-primitives/commit/97d2971a96bb7b956fcd8d974473895792fb5d49",
"target": {
"file": "sources/ippcp/crypto_mb/src/sm4/sm4_xts_dec_mb16.c",
"function": "mbx_sm4_xts_decrypt_mb16"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2023-35121-315ae13d",
"digest": {
"length": 256,
"function_hash": "3320404005344639311745519663803632454"
},
"source": "https://github.com/intel/cryptography-primitives/commit/97d2971a96bb7b956fcd8d974473895792fb5d49",
"target": {
"file": "sources/ippcp/pcprsa_getdefmeth_priv.h",
"function": "getDualExpMethod_RSA_private"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2023-35121-71e620ba",
"digest": {
"length": 950,
"function_hash": "76258044349229975639822142012025337790"
},
"source": "https://github.com/intel/cryptography-primitives/commit/97d2971a96bb7b956fcd8d974473895792fb5d49",
"target": {
"file": "sources/ippcp/crypto_mb/src/sm4/sm4_xts_enc_mb16.c",
"function": "mbx_sm4_xts_encrypt_mb16"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:33:47Z"
}
}
],
"modified": "2026-10-24T14:33:47.785623918Z",
"provider": "osv",
"references": [
"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:intel:advisor:*:*:*:*:*:*:*:*"
],
"vendor_product": "intel:advisor",
"extracted_events": [
{
"range": [
{
"fixed": "2023.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:inspector:*:*:*:*:*:*:*:*"
],
"vendor_product": "intel:inspector",
"extracted_events": [
{
"range": [
{
"fixed": "2023.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:*"
],
"vendor_product": "intel:mpi_library",
"extracted_events": [
{
"range": [
{
"fixed": "2021.10"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*"
],
"vendor_product": "intel:oneapi_base_toolkit",
"extracted_events": [
{
"range": [
{
"fixed": "2023.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:oneapi_deep_neural_network:*:*:*:*:*:*:*:*"
],
"vendor_product": "intel:oneapi_deep_neural_network",
"extracted_events": [
{
"range": [
{
"fixed": "2023.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:oneapi_math_kernel_library:*:*:*:*:*:*:*:*"
],
"vendor_product": "intel:oneapi_math_kernel_library",
"extracted_events": [
{
"range": [
{
"fixed": "2023.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:threading_building_blocks:*:*:*:*:*:*:*:*"
],
"vendor_product": "intel:threading_building_blocks",
"extracted_events": [
{
"range": [
{
"fixed": "2021.10"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:vtune_profiler:*:*:*:*:*:-:*:*"
],
"vendor_product": "intel:vtune_profiler",
"extracted_events": [
{
"range": [
{
"fixed": "2023.2"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:cluster_checker:2021.7.3:*:*:*:*:*:*:*"
],
"vendor_product": "intel:cluster_checker",
"extracted_events": [
{
"range": [
{
"introduced": "2021.7.3"
},
{
"last_affected": "2021.7.3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:distribution_for_python:2023.1:*:*:*:*:*:*:*"
],
"vendor_product": "intel:distribution_for_python",
"extracted_events": [
{
"range": [
{
"introduced": "2023.1"
},
{
"last_affected": "2023.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:integrated_performance_primitives:2021.9:*:*:*:*:*:*:*"
],
"vendor_product": "intel:integrated_performance_primitives",
"extracted_events": [
{
"range": [
{
"introduced": "2021.9"
},
{
"last_affected": "2021.9"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:oneapi_ai_analytics_toolkit:2023.2:*:*:*:*:*:*:*"
],
"vendor_product": "intel:oneapi_ai_analytics_toolkit",
"extracted_events": [
{
"range": [
{
"introduced": "2023.2"
},
{
"last_affected": "2023.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:oneapi_base_toolkit:2023.2:*:*:*:*:*:*:*"
],
"vendor_product": "intel:oneapi_base_toolkit",
"extracted_events": [
{
"range": [
{
"introduced": "2023.2"
},
{
"last_affected": "2023.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:oneapi_deep_neural_network:2023.2:*:*:*:*:*:*:*"
],
"vendor_product": "intel:oneapi_deep_neural_network",
"extracted_events": [
{
"range": [
{
"introduced": "2023.2"
},
{
"last_affected": "2023.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:oneapi_hpc_toolkit:2023.2:*:*:*:*:*:*:*"
],
"vendor_product": "intel:oneapi_hpc_toolkit",
"extracted_events": [
{
"range": [
{
"introduced": "2023.2"
},
{
"last_affected": "2023.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:oneapi_iot_toolkit:2023.2:*:*:*:*:*:*:*"
],
"vendor_product": "intel:oneapi_iot_toolkit",
"extracted_events": [
{
"range": [
{
"introduced": "2023.2"
},
{
"last_affected": "2023.2"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:intel:trace_analyzer_and_collector:2021.10.0:*:*:*:*:*:*:*"
],
"vendor_product": "intel:trace_analyzer_and_collector",
"extracted_events": [
{
"range": [
{
"introduced": "2021.10.0"
},
{
"last_affected": "2021.10.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2023-35121",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443778,
"published_at": "2024-02-14T14:16:00.123+00:00"
}