CVE-2018-12221CWE-20

CVE-2018-12221

High · published March 15, 2019

CVSS v3.0
7.8
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-03-15T00:29Z
Affected products (23)
ProductVersionsFixed in
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
References (4)
EPSS history
Timeline
  • 14 MAR 20:00Z
    Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka…
    cvelistv5