Database/Control plane, storage & DevOps

Intel oneAPI DPC++/C++ compiler (homoglyph rendering): Homoglyph characters are not visually distinguished

CVE-2022-26843Control plane, storage & DevOpscurated

Impact

Homoglyph characters are not visually distinguished by the toolchain, so two different identifiers can look identical in review. Companion to the bidirectional-override issue and part of the same supply-chain risk when compiling contributed GPU kernels.

Who can reach it

Anyone whose source reaches your compiler.

What to do

Upgrade to oneAPI 2022.1 or later and screen source for confusable identifiers in CI. Toolchain-only, no reboot.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-26843 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.