← Back

CVE-2018-12221

nvd nist
Published: Mar 14, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.

Affected (23)

Intel
1 product
Graphics Driver
Configuration A
23 vulnerable
Vulnerable SoftwareAffected Versions
Intel
Graphics Driver
Version 15.33.43.4425
Graphics Driver
Version 15.33.45.4653
Graphics Driver
Version 15.33.46.4885
Graphics Driver
Version 15.36.26.4294
Graphics Driver
Version 15.36.28.4332
Graphics Driver
Version 15.36.31.4414
Graphics Driver
Version 15.36.33.4578
Graphics Driver
Version 15.36.34.4889
Graphics Driver
Version 15.40.34.4624
Graphics Driver
Version 15.40.36.4703
Graphics Driver
Version 15.40.37.4835
Graphics Driver
Version 15.40.38.4963
Graphics Driver
Version 15.40.41.5058
Graphics Driver
Version 15.45.18.4664
Graphics Driver
Version 15.45.19.4678
Graphics Driver
Version 15.45.21.4821
Graphics Driver
Version 15.45.23.4860
Graphics Driver
Version 24.20.100.6025
Graphics Driver
Version 24.20.100.6094
Graphics Driver
Version 24.20.100.6136
Graphics Driver
Version 24.20.100.6194
Graphics Driver
Version 24.20.100.6229
Graphics Driver
Version 24.20.100.6286

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: secure@intel.com
Source: secure@intel.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.