CVE-2021-0001(intel / integrated_performance_primitives_cryptography)

CVE-2021-0001 | When timing tells a secret A locked door can still reveal clues if different keys take different amounts of time to reject. In Intel IPP before version 2020 update 1, an observable timing discrepancy could potentially expose information. The official record describes an authorized user with local access. It does not describe an unauthenticated attacker stealing data remotely, or say that every Intel product is affected. The lesson: security includes what software reveals indirectly. Keep affected libraries updated and check the exact product and version.

Affected product: Intel IPP before 2020 update 1. The record describes potential information disclosure through observable timing differences, requiring an authorized user with local access. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2021/0xxx/CVE-2021-0001.json