CVE-2023-47282: 
Ffmpeg vulnerability analysis and mitigation

An out-of-bounds write vulnerability (CVE-2023-47282) has been identified in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5. This security flaw affects authenticated users with local access to the system (Intel Advisory).

The vulnerability is classified as an out-of-bounds write issue (CWE-787) with a CVSS v3.1 Base Score of 3.9 (Low). The vulnerability has the following vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L, indicating local access is required, low attack complexity, low privileges required, and user interaction is needed (Intel Advisory).

If exploited, this vulnerability could potentially enable escalation of privilege through local access. The CVSS scoring indicates low impacts on integrity and availability, with no direct impact on confidentiality (Intel Advisory).

The vulnerability requires local access and user interaction for exploitation. An authenticated user with local access to the system could potentially exploit this vulnerability (Intel Advisory).

Intel has released software updates to mitigate this vulnerability. For Intel oneVPL software, users should upgrade to version 23.3.5 or later. For Intel Media SDK, Intel has issued a Product Discontinuation notice and recommends users uninstall it or discontinue use, suggesting a transition to Intel oneVPL software (Intel Advisory).