What’s Vulnerable › Vulnerabilities

CVE-2023-22327

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-14 · updated 2026-06-17
• Weakness: CWE-787

Description

Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access.

Affected products

• Intel Agilex 7 Fpga F-Series 006 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga F-Series 008 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga F-Series 012 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga F-Series 014 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga F-Series 019 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga F-Series 022 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga F-Series 023 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga F-Series 027 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga I-Series 019 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga I-Series 022 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga I-Series 023 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga I-Series 027 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga I-Series 035 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga I-Series 040 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga I-Series 041 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Agilex 7 Fpga M-Series 039 Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Dx 1100 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Dx 2100 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Dx 2800 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 10M Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 1100 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 1650 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 1660 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 2100 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 2110 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 2500 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 2800 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 400 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 650 Fpga Firmware: before 2.8.1 — fixed in 2.8.1
• Intel Stratix 10 Gx 850 Fpga Firmware: before 2.8.1 — fixed in 2.8.1

How to fix

Upgrade to a fixed version: Intel Agilex 7 Fpga F-Series 006 Firmware 2.8.1; Intel Agilex 7 Fpga F-Series 008 Firmware 2.8.1; Intel Agilex 7 Fpga F-Series 012 Firmware 2.8.1; Intel Agilex 7 Fpga F-Series 014 Firmware 2.8.1; Intel Agilex 7 Fpga F-Series 019 Firmware 2.8.1; Intel Agilex 7 Fpga F-Series 022 Firmware 2.8.1; Intel Agilex 7 Fpga F-Series 023 Firmware 2.8.1; Intel Agilex 7 Fpga F-Series 027 Firmware 2.8.1; Intel Agilex 7 Fpga I-Series 019 Firmware 2.8.1; Intel Agilex 7 Fpga I-Series 022 Firmware 2.8.1; Intel Agilex 7 Fpga I-Series 023 Firmware 2.8.1; Intel Agilex 7 Fpga I-Series 027 Firmware 2.8.1. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00957.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00957.html

Get alerted when CVE-2023-22327 or the next vulnerability affects your stack