CVE-2018-18089: Medium severity Intel Graphics Driver Windows vulnerability
Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 10.18.x.5059 - Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 10.18.x.5057 - Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 20.19.x.5063 - Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 21.20.x.5064 - Upgrade
Upgrade
Intel(R) Graphics Driver for Windows*to a version that resolves this vulnerability.Fixed in 24.20.100.6373
Event History
Frequently Asked Questions
What is the severity of CVE-2018-18089?
CVE-2018-18089 is rated as a high severity vulnerability due to its potential to allow authenticated users to read out-of-bounds memory.
How do I fix CVE-2018-18089?
To fix CVE-2018-18089, update the Intel Graphics Driver to a version that is 10.18.x.5059 or later.
Which Intel graphics driver versions are affected by CVE-2018-18089?
CVE-2018-18089 affects multiple versions of Intel Graphics Driver prior to versions 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064, and 24.20.100.6373.
What is an out-of-bounds read vulnerability like CVE-2018-18089?
An out-of-bounds read vulnerability like CVE-2018-18089 allows attackers to read memory areas that should not be accessible, potentially leading to information disclosure.
Who is impacted by CVE-2018-18089?
Any user with an authenticated session on a system running the affected versions of the Intel Graphics Driver is vulnerable to CVE-2018-18089.