CVEvulnerability
CVE-2018-12219
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-03-14
- Last modified
- 2026-10-15
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read memory via local access via local access.
Affected configurations
• intel graphics driver 15.33.43.4425
• intel graphics driver 15.33.45.4653
• intel graphics driver 15.33.46.4885
• intel graphics driver 15.36.26.4294
• intel graphics driver 15.36.28.4332
• intel graphics driver 15.36.31.4414
• intel graphics driver 15.36.33.4578
• intel graphics driver 15.36.34.4889
• intel graphics driver 15.40.34.4624
• intel graphics driver 15.40.36.4703
• intel graphics driver 15.40.37.4835
• intel graphics driver 15.40.38.4963
• intel graphics driver 15.40.41.5058
• intel graphics driver 15.45.18.4664
• intel graphics driver 15.45.19.4678
• intel graphics driver 15.45.21.4821
• intel graphics driver 15.45.23.4860
• intel graphics driver 24.20.100.6025
• intel graphics driver 24.20.100.6094
• intel graphics driver 24.20.100.6136
• intel graphics driver 24.20.100.6194
• intel graphics driver 24.20.100.6229
• intel graphics driver 24.20.100.6286
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory