CVE-2018-12221 : Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.505

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an integer overflow via local access.

Published 2019-03-14 20:29:01

Updated 2019-04-04 19:29:01

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: OverflowInput validation

Exploit prediction scoring system (EPSS) score for CVE-2018-12221

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-12221

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-12221

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

Products affected by CVE-2018-12221

Intel » Graphics Driver » Version: 15.36.26.4294 For Windows
cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.36.28.4332 For Windows
cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.36.31.4414 For Windows
cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.40.41.5058 For Windows
cpe:2.3:a:intel:graphics_driver:15.40.41.5058:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.45.18.4664 For Windows
cpe:2.3:a:intel:graphics_driver:15.45.18.4664:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 24.20.100.6194 For Windows
cpe:2.3:a:intel:graphics_driver:24.20.100.6194:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 24.20.100.6229 For Windows
cpe:2.3:a:intel:graphics_driver:24.20.100.6229:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.36.33.4578 For Windows
cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.36.34.4889 For Windows
cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.45.19.4678 For Windows
cpe:2.3:a:intel:graphics_driver:15.45.19.4678:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.45.21.4821 For Windows
cpe:2.3:a:intel:graphics_driver:15.45.21.4821:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 24.20.100.6286 For Windows
cpe:2.3:a:intel:graphics_driver:24.20.100.6286:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.33.45.4653 For Windows
cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.33.46.4885 For Windows
cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.40.37.4835 For Windows
cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.40.38.4963 For Windows
cpe:2.3:a:intel:graphics_driver:15.40.38.4963:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 24.20.100.6094 For Windows
cpe:2.3:a:intel:graphics_driver:24.20.100.6094:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 24.20.100.6136 For Windows
cpe:2.3:a:intel:graphics_driver:24.20.100.6136:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.33.43.4425 For Windows
cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.40.34.4624 For Windows
cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.40.36.4703 For Windows
cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 15.45.23.4860 For Windows
cpe:2.3:a:intel:graphics_driver:15.45.23.4860:*:*:*:*:windows:*:*
Matching versions
Intel » Graphics Driver » Version: 24.20.100.6025 For Windows
cpe:2.3:a:intel:graphics_driver:24.20.100.6025:*:*:*:*:windows:*:*
Matching versions

Vulnerability Details : CVE-2018-12221

Exploit prediction scoring system (EPSS) score for CVE-2018-12221

CVSS scores for CVE-2018-12221

CWE ids for CVE-2018-12221

References for CVE-2018-12221

Products affected by CVE-2018-12221