CVE-2018-12222CWE-125CWE-20

CVE-2018-12222

Low · published March 15, 2019

CVSS v3.0
3.3
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access.

The record
Technical detail
CVSS v3.0
3.3 · LOW
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-20 · Improper Input Validation
Published
2019-03-15T00:29Z
Affected products (23)
ProductVersionsFixed in
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
intel/graphics_driverall versions—
References (4)
https://support.lenovo.com/us/en/product_security/LEN-25084 · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html · [email protected]https://support.lenovo.com/us/en/product_security/LEN-25084 · af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 MAR 20:00Z
    Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka…
    cvelistv5