CVE-2018-12216: Input Validation

Published Mar 14, 2019

Updated

Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables a privileged user to execute arbitrary code via local access via local access.

Affected Software

23 affected components

Intel Graphics Driver Windows=15.33.43.4425

Intel Graphics Driver Windows=15.33.45.4653

Intel Graphics Driver Windows=15.33.46.4885

Intel Graphics Driver Windows=15.36.26.4294

Intel Graphics Driver Windows=15.36.28.4332

Intel Graphics Driver Windows=15.36.31.4414

Intel Graphics Driver Windows=15.36.33.4578

Intel Graphics Driver Windows=15.36.34.4889

Intel Graphics Driver Windows=15.40.34.4624

Intel Graphics Driver Windows=15.40.36.4703

Intel Graphics Driver Windows=15.40.37.4835

Intel Graphics Driver Windows=15.40.38.4963

Intel Graphics Driver Windows=15.40.41.5058

Intel Graphics Driver Windows=15.45.18.4664

Intel Graphics Driver Windows=15.45.19.4678

Intel Graphics Driver Windows=15.45.21.4821

Intel Graphics Driver Windows=15.45.23.4860

Intel Graphics Driver Windows=24.20.100.6025

Intel Graphics Driver Windows=24.20.100.6094

Intel Graphics Driver Windows=24.20.100.6136

Intel Graphics Driver Windows=24.20.100.6194

Intel Graphics Driver Windows=24.20.100.6229

Intel Graphics Driver Windows=24.20.100.6286

Remediation

Patch Available

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html

Event History

Mar 14, 2019

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-12216?

CVE-2018-12216 is a vulnerability in the Kernel Mode Driver in Intel(R) Graphics Driver for Windows* that allows a privileged user to execute arbitrary code or cause a denial of service (DoS) condition.

How does CVE-2018-12216 impact Intel Graphics Driver for Windows*?

CVE-2018-12216 can potentially enable a privileged user to execute arbitrary code or cause a denial of service (DoS) condition on systems running affected versions of Intel Graphics Driver for Windows*.

What is the severity of CVE-2018-12216?

CVE-2018-12216 has a severity rating of 8.2 (high).

How do I know if my system is affected by CVE-2018-12216?

To determine if your system is affected by CVE-2018-12216, check the version of Intel Graphics Driver for Windows* installed on your system against the list of affected versions.

How can I fix the CVE-2018-12216 vulnerability?

To fix the CVE-2018-12216 vulnerability, update Intel Graphics Driver for Windows* to versions 10.18.x.5059 or newer, 10.18.x.5057 or newer, 20.19.x.5063 or newer, 21.20.x.5064 or newer, or 24.20.100.6373 or newer.