CVE-2018-12224: Infoleak

Published Mar 14, 2019

Updated

Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.

Affected Software

24 affected components

Intel Graphics Driver=15.33.43.4425

Intel Graphics Driver=15.33.45.4653

Intel Graphics Driver=15.33.46.4885

Intel Graphics Driver=15.36.26.4294

Intel Graphics Driver=15.36.28.4332

Intel Graphics Driver=15.36.31.4414

Intel Graphics Driver=15.36.33.4578

Intel Graphics Driver=15.36.34.4889

Intel Graphics Driver=15.40.34.4624

Intel Graphics Driver=15.40.36.4703

Intel Graphics Driver=15.40.37.4835

Intel Graphics Driver=15.40.38.4963

Intel Graphics Driver=15.40.41.5058

Intel Graphics Driver=15.45.18.4664

Intel Graphics Driver=15.45.19.4678

Intel Graphics Driver=15.45.21.4821

Intel Graphics Driver=15.45.23.4860

Intel Graphics Driver=24.20.100.6025

Intel Graphics Driver=24.20.100.6094

Intel Graphics Driver=24.20.100.6136

Intel Graphics Driver=24.20.100.6194

Intel Graphics Driver=24.20.100.6229

Intel Graphics Driver=24.20.100.6286

Microsoft Windows

Remediation

Patch Available

https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html

Event History

Mar 14, 2019

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-12224?

CVE-2018-12224 is a vulnerability in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064, and 24.20.100.6373.

What is the severity of CVE-2018-12224?

The severity of CVE-2018-12224 is low with a CVSS score of 3.3.

How does CVE-2018-12224 affect Intel Graphics Driver?

CVE-2018-12224 may allow an authenticated user to potentially enable information disclosure by causing buffer leakage in igdkm64.sys.

How can I fix CVE-2018-12224?

To fix CVE-2018-12224, update Intel Graphics Driver to versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064, or 24.20.100.6373.

Where can I find more information about CVE-2018-12224?

You can find more information about CVE-2018-12224 at the following references: [Link 1](https://support.lenovo.com/us/en/product_security/LEN-25084), [Link 2](https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html).