CVE-2018-12221

Summary

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.

Impact & exploitability

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html ↗

Additional information

• NVD record
• https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.htmlPatch
• https://support.lenovo.com/us/en/product_security/LEN-25084