Intel Graphics Driver up to 10.18/20.19/21.20/24.20 on Windows User Mode Driver memory corruption

Summaryinfo

A vulnerability, which was classified as critical, has been found in Intel Graphics Driver up to 10.18/20.19/21.20/24.20 on Windows. This affects an unknown function of the component User Mode Driver. This manipulation causes memory corruption. This vulnerability is registered as CVE-2018-12212. The attack needs to be launched locally. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Intel Graphics Driver up to 10.18/20.19/21.20/24.20 on Windows (Hardware Driver Software) and classified as critical. Affected by this vulnerability is an unknown functionality of the component User Mode Driver. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Buffer overflow in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause a denial of service via local access.

The bug was discovered 03/12/2019. The weakness was published 03/14/2019 (Website). It is possible to read the advisory at intel.com. This vulnerability is known as CVE-2018-12212 since 06/11/2018. Attacking locally is a requirement. The successful exploitation needs a single authentication. The technical details are unknown and an exploit is not publicly available.

The vulnerability was handled as a non-public zero-day exploit for at least 2 days. During that time the estimated underground price was around $5k-$25k. The commercial vulnerability scanner Qualys is able to test this issue with plugin 371696 (Intel Graphics Driver Multiple Vulnerabilities(INTEL-SA-00189)).

Upgrading to version 10.18.x.5059, 10.18.x.5057, 20.19.x.5063, 21.20.x.5064 or 24.20.100.6373 eliminates this vulnerability.

Similar entries are available at VDB-131752, VDB-131753, VDB-131754 and VDB-131756. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Hardware Driver Software

Vendor

• Intel

Name

• Graphics Driver

Version

• 10.0
• 10.1
• 10.2
• 10.3
• 10.4
• 10.5
• 10.6
• 10.7
• 10.8
• 10.9
• 10.10
• 10.11
• 10.12
• 10.13
• 10.14
• 10.15
• 10.16
• 10.17
• 10.18
• 20.0
• 20.1
• 20.2
• 20.3
• 20.4
• 20.5
• 20.6
• 20.7
• 20.8
• 20.9
• 20.10
• 20.11
• 20.12
• 20.13
• 20.14
• 20.15
• 20.16
• 20.17
• 20.18
• 20.19
• 21.0
• 21.1
• 21.2
• 21.3
• 21.4
• 21.5
• 21.6
• 21.7
• 21.8
• 21.9
• 21.10
• 21.11
• 21.12
• 21.13
• 21.14
• 21.15
• 21.16
• 21.17
• 21.18
• 21.19
• 21.20
• 24.0
• 24.1
• 24.2
• 24.3
• 24.4
• 24.5
• 24.6
• 24.7
• 24.8
• 24.9
• 24.10
• 24.11
• 24.12
• 24.13
• 24.14
• 24.15
• 24.16
• 24.17
• 24.18
• 24.19
• 24.20

License

• commercial

Website

• Vendor: https://www.intel.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion