NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial of service via local access.
Weakness
Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Intel-mediasdk | Ubuntu | focal | * |
| Intel-mediasdk | Ubuntu | oracular | * |
| Onevpl-intel-gpu | Ubuntu | upstream | * |
Extended Description
Programmers typically catch NullPointerException under three circumstances:
Of these three circumstances, only the last is acceptable.