PT-2021-1994 · Intel · Intel Graphics Drivers

Steffen Schulz + 1 · Published 2021-02-09 · Updated 2021-07-21 · CVE-2020-12370

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 26.20.100.8141

Description The issue is related to an untrusted pointer dereference in some Intel Graphics Drivers, which may allow a privileged user to potentially enable a denial of service via local access. This is due to the lack of checking the value of a pointer before it is dereferenced.

Recommendations For versions prior to 26.20.100.8141, update to version 26.20.100.8141 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

Untrusted Pointer Dereference

Buffer Overflow

Weakness Enumeration

CWE-822

CWE-119

Related Identifiers

BDU:2021-00824

CVE-2020-12370

Affected Products

Intel Graphics Drivers

References · 6

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12370 · Security Note
• https://bdu.fstec.ru/vul/2021-00824 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12370 · Vendor Advisory
• https://t.me/cvenotify/10050 · Telegram Post
• https://t.me/cibsecurity/23719 · Telegram Post