PT-2021-1990 · Intel · Intel Graphics Drivers

Published 2021-02-09 · Updated 2021-02-22 · CVE-2020-12385

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 26.20.100.8141

Description The issue is related to insufficient input validation in Intel Graphics Drivers, which may allow a privileged user to potentially enable escalation of privilege via local access. This could permit an attacker to elevate their privileges.

Recommendations For versions prior to 26.20.100.8141, update to version 26.20.100.8141 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2021-00818

CVE-2020-12385

Affected Products

Intel Graphics Drivers

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12385 · Security Note
• https://bdu.fstec.ru/vul/2021-00818 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12385 · Vendor Advisory