Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.
Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.
The product dereferences a pointer that it expects to be valid but is NULL.
Link | Tags |
---|---|
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00692.html | vendor advisory |