CVE-2018-12219: Input Validation
Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to read memory via local access via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 10.18.x.5059 - Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 10.18.x.5057 - Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 20.19.x.5063 - Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 21.20.x.5064 - Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 24.20.100.6373
Event History
Frequently Asked Questions
What is CVE-2018-12219?
CVE-2018-12219 is a vulnerability in the Intel(R) Graphics Driver for Windows* that allows an unprivileged user to potentially execute arbitrary code on a vulnerable system.
What is the severity of CVE-2018-12219?
The severity of CVE-2018-12219 is medium with a CVSS score of 5.5.
How does CVE-2018-12219 impact affected software?
CVE-2018-12219 impacts Intel Graphics Driver versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064, and 24.20.100.6373 on Windows* by enabling an unprivileged user to potentially execute arbitrary code.
Are there any known fixes for CVE-2018-12219?
Yes, Intel has released updated versions of the Intel Graphics Driver to address the vulnerability. It is recommended to update to the latest version available.
Where can I find more information about CVE-2018-12219?
You can find more information about CVE-2018-12219 on the Lenovo product security website and the Intel Security Center advisory.