PT-2019-4047 · Intel · Intel Graphics Driver

Published 2019-11-12 · Updated 2022-11-10 · CVE-2019-11113

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Graphics Driver versions prior to 25.20.100.6618 (DCH) or 21.20.x.5077 (aka 15.45.5077)

Description The issue is related to a buffer overflow in the Kernel Mode module of the Intel Graphics Driver, which may allow a privileged user to enable information disclosure via local access. This could potentially allow an attacker to disclose protected information.

Recommendations For versions prior to 25.20.100.6618 (DCH), update to version 25.20.100.6618 or later. For versions prior to 21.20.x.5077 (aka 15.45.5077), update to version 21.20.x.5077 or later. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2019-04608

CVE-2019-11113

Affected Products

Intel Graphics Driver

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-11113 · Security Note
• https://bdu.fstec.ru/vul/2019-04608 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-11113 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20200320-0005 · Note