CVE-2023-48368: 
Ffmpeg vulnerability analysis and mitigation

Improper input validation in Intel(R) Media SDK software affects all versions of the software. The vulnerability was disclosed on May 14, 2024, and has been assigned a medium severity rating. This security flaw impacts Intel Media SDK software and some versions of Intel oneAPI Video Processing Library (oneVPL) software (Intel Advisory).

The vulnerability has been assigned a CVSS Base Score of 5.9 (Medium) with a vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H. The flaw specifically relates to improper input validation in the software that requires local access and user authentication for exploitation (Intel Advisory).

When successfully exploited, this vulnerability allows an authenticated user to potentially enable denial of service via local access. The impact is primarily focused on system availability, with no direct impact on confidentiality or integrity (Intel Advisory).

The vulnerability requires local access and user authentication for exploitation. The attacker needs to have authenticated access to the system and must interact with the user interface to trigger the vulnerability (Intel Advisory).

Intel has issued a Product Discontinuation notice for Intel® Media SDK software and recommends that users uninstall it or discontinue use at their earliest convenience. Users are encouraged to transition to Intel® oneVPL software as soon as possible, following the transition guide for upgrading from Intel® Media SDK to Intel® oneVPL (Intel Advisory).