CVE-2018-12152

Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.

CVSS v2.0 4.6

4.6^/10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

CVSS v3.0 7.8 HIGH

7.8^/10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html	Mitigation Vendor Advisory
http://www.securityfocus.com/bid/105582	Third Party Advisory VDB Entry
https://support.apple.com/kb/HT210722
https://support.apple.com/kb/HT210634
http://seclists.org/fulldisclosure/2019/Oct/56
http://seclists.org/fulldisclosure/2019/Oct/55

Configurations

Configuration 1

cpe:2.3:a:intel:graphics_driver:15.40.37.4835:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.36.4703:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.34.4624:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.35.5057:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.41.5058:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.40.38.4963:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:*:*:*

cpe:2.3:a:intel:graphics_driver:15.33.47.5059:*:*:*:*:*:*:*

History

24 Jan 2023, 16:19

Type	Values Removed	Values Added
CPE		cpe:2.3:a:predictapp_project:predictapp::::::::
References	~~(MISC) https://github.com/abhilash1985/PredictApp/commit/b067372f3ee26fe1b657121f0f41883ff4461a06 -~~	(MISC) https://github.com/abhilash1985/PredictApp/commit/b067372f3ee26fe1b657121f0f41883ff4461a06 - Patch, Third Party Advisory
References	~~(MISC) https://github.com/abhilash1985/PredictApp/pull/73 -~~	(MISC) https://github.com/abhilash1985/PredictApp/pull/73 - Patch, Third Party Advisory
References	~~(MISC) https://vuldb.com/?id.218387 -~~	(MISC) https://vuldb.com/?id.218387 - Third Party Advisory
References	~~(MISC) https://vuldb.com/?ctiid.218387 -~~	(MISC) https://vuldb.com/?ctiid.218387 - Third Party Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
First Time		Predictapp Project predictapp Predictapp Project

16 Jan 2023, 13:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2018-10-10 06:29

Updated : 2019-10-30 03:15

NVD link : CVE-2018-12152

Mitre link : CVE-2018-12152

Products Affected

No products.

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer