CVE-2018-12221 | ByteOS Network

Vulnerability Details :

CVE-2018-12221

Assigner-intel

Assigner Org ID-6dda929c-bb53-4a77-a76d-48e79601a1ce

Published At-14 Mar, 2019 | 20:00

Updated At-16 Sep, 2024 | 16:32

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:intel

Assigner Org ID:6dda929c-bb53-4a77-a76d-48e79601a1ce

Published At:14 Mar, 2019 | 20:00

Updated At:16 Sep, 2024 | 16:32

▼CVE Numbering Authority (CNA)

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.

Affected Products

Vendor

Intel Corporation

Product

Intel(R) Graphics Driver for Windows

Versions

Affected

Multiple versions.

Problem Types

Type	CWE ID	Description
text	N/A	Escalation of Privilege

Type: text

CWE ID: N/A

Description: Escalation of Privilege

References

Hyperlink	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html	x_refsource_CONFIRM
https://support.lenovo.com/us/en/product_security/LEN-25084	x_refsource_CONFIRM

Hyperlink: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-25084

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html	x_refsource_CONFIRM x_transferred
https://support.lenovo.com/us/en/product_security/LEN-25084	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-25084

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:secure@intel.com

Published At:14 Mar, 2019 | 20:29

Updated At:04 Apr, 2019 | 19:29

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.6

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Intel Corporation

>>graphics_driver>>15.33.43.4425

cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.33.45.4653

cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.33.46.4885

cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.36.26.4294

cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.36.28.4332

cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.36.31.4414

cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.36.33.4578

cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.36.34.4889

cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.40.34.4624

cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.40.36.4703

cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.40.37.4835

cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.40.38.4963

cpe:2.3:a:intel:graphics_driver:15.40.38.4963:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.40.41.5058

cpe:2.3:a:intel:graphics_driver:15.40.41.5058:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.45.18.4664

cpe:2.3:a:intel:graphics_driver:15.45.18.4664:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.45.19.4678

cpe:2.3:a:intel:graphics_driver:15.45.19.4678:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.45.21.4821

cpe:2.3:a:intel:graphics_driver:15.45.21.4821:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>15.45.23.4860

cpe:2.3:a:intel:graphics_driver:15.45.23.4860:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>24.20.100.6025

cpe:2.3:a:intel:graphics_driver:24.20.100.6025:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>24.20.100.6094

cpe:2.3:a:intel:graphics_driver:24.20.100.6094:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>24.20.100.6136

cpe:2.3:a:intel:graphics_driver:24.20.100.6136:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>24.20.100.6194

cpe:2.3:a:intel:graphics_driver:24.20.100.6194:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>24.20.100.6229

cpe:2.3:a:intel:graphics_driver:24.20.100.6229:*:*:*:*:windows:*:*

Intel Corporation

>>graphics_driver>>24.20.100.6286

cpe:2.3:a:intel:graphics_driver:24.20.100.6286:*:*:*:*:windows:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.lenovo.com/us/en/product_security/LEN-25084	secure@intel.com	N/A
https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html	secure@intel.com	Patch Vendor Advisory

Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-25084

Source: secure@intel.com

Resource: N/A

Hyperlink: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html

Source: secure@intel.com

Resource:

Patch

Vendor Advisory