Intel is committed to rapidly addressing security vulnerabilities affecting our customers and providing clear guidance on the solution, impact, severity and mitigation.

dvledtx is designed for deployment on a physically secured, network-isolated media segment. The transport (SMPTE ST 2110-20) and its PTP timing provide no authentication, encryption or integrity protection; security is delegated to MTL/ST 2110 and to the physical and Layer 2 isolation of that segment.

In scope: the dvledtx transmitter application, its JSON configuration parsing, and its use of FFmpeg and the Media Transport Library.

Out of scope: the receivers (customer-designed, typically FPGA-based, and not delivered with this toolkit), the LED panels, and the physical and network controls of the installation site.

The trust boundary, the deployment assumptions this model depends on, and the residual risk if those assumptions are broken are documented in Deployment Assumptions and Security Model.

Please report any security vulnerabilities in this project utilizing the guidelines here.