CVEvulnerability
CVE-2018-18089
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-03-14
- Last modified
- 2026-10-15
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-125
Description
Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
Affected configurations
• intel graphics driver 15.33.43.4425
• intel graphics driver 15.33.45.4653
• intel graphics driver 15.33.46.4885
• intel graphics driver 15.36.26.4294
• intel graphics driver 15.36.28.4332
• intel graphics driver 15.36.31.4414
• intel graphics driver 15.36.33.4578
• intel graphics driver 15.36.34.4889
• intel graphics driver 15.40.34.4624
• intel graphics driver 15.40.36.4703
• intel graphics driver 15.40.37.4835
• intel graphics driver 15.40.38.4963
• intel graphics driver 15.40.41.5058
• intel graphics driver 15.45.18.4664
• intel graphics driver 15.45.19.4678
• intel graphics driver 15.45.21.4821
• intel graphics driver 15.45.23.4860
• intel graphics driver 24.20.100.6025
• intel graphics driver 24.20.100.6094
• intel graphics driver 24.20.100.6136
• intel graphics driver 24.20.100.6194
• intel graphics driver 24.20.100.6229
• intel graphics driver 24.20.100.6286
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-25084 support.lenovo.com
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html Patch, Vendor Advisory