CVEvulnerability
CVE-2018-12224
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2019-03-14
- Last modified
- 2026-10-15
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 3.3 LOW — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
Affected configurations
• intel graphics driver 15.33.43.4425
• intel graphics driver 15.33.45.4653
• intel graphics driver 15.33.46.4885
• intel graphics driver 15.36.26.4294
• intel graphics driver 15.36.28.4332
• intel graphics driver 15.36.31.4414
• intel graphics driver 15.36.33.4578
• intel graphics driver 15.36.34.4889
• intel graphics driver 15.40.34.4624
• intel graphics driver 15.40.36.4703
• intel graphics driver 15.40.37.4835
• intel graphics driver 15.40.38.4963
• intel graphics driver 15.40.41.5058
• intel graphics driver 15.45.18.4664
• intel graphics driver 15.45.19.4678
• intel graphics driver 15.45.21.4821
• intel graphics driver 15.45.23.4860
• intel graphics driver 24.20.100.6025
• intel graphics driver 24.20.100.6094
• intel graphics driver 24.20.100.6136
• intel graphics driver 24.20.100.6194
• intel graphics driver 24.20.100.6229
• intel graphics driver 24.20.100.6286
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory