PT-2021-1996 · Intel · Intel Graphics Drivers

Published 2021-02-09 · Updated 2021-02-22 · CVE-2020-12372

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 26.20.100.8141

Description The issue is related to the absence of return value checking in some Intel Graphics Drivers, which may allow a privileged user to potentially enable a denial of service via local access. This could lead to a service disruption.

Recommendations For versions prior to 26.20.100.8141, update to version 26.20.100.8141 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2021-00826

CVE-2020-12372

Affected Products

Intel Graphics Drivers

References · 6

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12372 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12372 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00826 · Security Note
• https://t.me/cvenotify/10045 · Telegram Post
• https://t.me/cibsecurity/23713 · Telegram Post