CVE-2022-34346

What it actually does

Out-of-bounds read in the Intel Media SDK before 22.2.2 that permits an authenticated local user to escalate privileges.

Why it matters to the business

Local attackers can gain full system control on affected Debian systems running vulnerable libzstd, increasing risk of unauthorized access or further compromise; the issue has been public for over three years with no observed exploitation.

How an attack unfolds

An authenticated local user supplies crafted input to the vulnerable media SDK or libzstd component, triggering an out-of-bounds read that allows privilege escalation.

How to fix it

Upgrade libzstd to 1.5.4+dfsg2-1 or later on Debian 12 and 13.

How to confirm the fix worked

Confirm installed libzstd version is 1.5.4+dfsg2-1 or newer via package manager.

Typical attack path

1. Obtain local authenticated access
2. Locate use of vulnerable Intel Media SDK or libzstd
3. Deliver malicious input to trigger the out-of-bounds read
4. Escalate to higher privileges

How to detect it

Review authentication and privilege-change logs for anomalies around media or compression library usage.

What your security team should do

• Apply the fixed libzstd packages immediately
• Restrict local user access where possible
• Audit systems for any unexpected privilege changes