CVE-2018-12222
Summary
| CVE | CVE-2018-12222 |
|---|---|
| State | PUBLISHED |
| Assigner | intel |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-03-14 20:29:01 UTC |
| Updated | 2026-10-15 18:17:13 UTC |
| Description | Insufficient input validation in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 potentially enables an unprivileged user to cause an out of bound memory read via local access. |
Risk And Classification
Primary CVSS: v3.0 3.3 LOW from [email protected]
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Problem Types: CWE-20 | CWE-125 | Information Disclosure
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 3.3 | LOW | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| 2.0 | [email protected] | Primary | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
CVSS v3.0 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
LowIntegrity
NoneAvailability
NoneCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:L/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Intel | Graphics Driver | 15.33.43.4425 | All | All | All |
| Application | Intel | Graphics Driver | 15.33.45.4653 | All | All | All |
| Application | Intel | Graphics Driver | 15.33.46.4885 | All | All | All |
| Application | Intel | Graphics Driver | 15.36.26.4294 | All | All | All |
| Application | Intel | Graphics Driver | 15.36.28.4332 | All | All | All |
| Application | Intel | Graphics Driver | 15.36.31.4414 | All | All | All |
| Application | Intel | Graphics Driver | 15.36.33.4578 | All | All | All |
| Application | Intel | Graphics Driver | 15.36.34.4889 | All | All | All |
| Application | Intel | Graphics Driver | 15.40.34.4624 | All | All | All |
| Application | Intel | Graphics Driver | 15.40.36.4703 | All | All | All |
| Application | Intel | Graphics Driver | 15.40.37.4835 | All | All | All |
| Application | Intel | Graphics Driver | 15.40.38.4963 | All | All | All |
| Application | Intel | Graphics Driver | 15.40.41.5058 | All | All | All |
| Application | Intel | Graphics Driver | 15.45.18.4664 | All | All | All |
| Application | Intel | Graphics Driver | 15.45.19.4678 | All | All | All |
| Application | Intel | Graphics Driver | 15.45.21.4821 | All | All | All |
| Application | Intel | Graphics Driver | 15.45.23.4860 | All | All | All |
| Application | Intel | Graphics Driver | 24.20.100.6025 | All | All | All |
| Application | Intel | Graphics Driver | 24.20.100.6094 | All | All | All |
| Application | Intel | Graphics Driver | 24.20.100.6136 | All | All | All |
| Application | Intel | Graphics Driver | 24.20.100.6194 | All | All | All |
| Application | Intel | Graphics Driver | 24.20.100.6229 | All | All | All |
| Application | Intel | Graphics Driver | 24.20.100.6286 | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Intel Corporation | IntelR Graphics Driver For Windows | affected Multiple versions. | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| INTEL-SA-00189 | af854a3a-2127-422b-91ae-364da2661108 | www.intel.com | Patch, Vendor Advisory |
| Intel Graphics Driver for Windows Vulnerabilities - Lenovo Support US | af854a3a-2127-422b-91ae-364da2661108 | support.lenovo.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.