PT-2019-4044 · Intel · Intel Graphics Driver

Published 2019-11-12 · Updated 2022-11-10 · CVE-2019-14590

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Graphics Driver versions prior to 26.20.100.7209

Description The issue is related to improper access control in the API for the Intel(R) Graphics Driver, which may allow an authenticated user to potentially enable information disclosure via local access. This is due to deficiencies in access control, potentially allowing an attacker to disclose protected information.

Recommendations For versions prior to 26.20.100.7209, update to version 26.20.100.7209 or later to resolve the issue.

Fix

Information Disclosure

Improper Privilege Management

Weakness Enumeration

CWE-200

CWE-269

Related Identifiers

BDU:2019-04605

CVE-2019-14590

Affected Products

Intel Graphics Driver

References · 5

• https://osv.dev/vulnerability/CVE-2019-14590 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14590 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04605 · Security Note
• https://security.netapp.com/advisory/ntap-20200320-0005 · Note