PT-2021-2009 · Intel · Intel Graphics Drivers

Published 2021-02-09 · Updated 2021-07-21 · CVE-2020-12365

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 15.33.51.5146 Intel Graphics Drivers versions prior to 15.45.32.5145 Intel Graphics Drivers versions prior to 15.36.39.5144 Intel Graphics Drivers versions prior to 15.40.46.5143

Description The issue is caused by an untrusted pointer dereference in some Intel Graphics Drivers, which may allow an authenticated user to potentially cause a denial of service via local access. This could be exploited by a user to disrupt the system.

Recommendations For versions prior to 15.33.51.5146, update to version 15.33.51.5146 or later. For versions prior to 15.45.32.5145, update to version 15.45.32.5145 or later. For versions prior to 15.36.39.5144, update to version 15.36.39.5144 or later. For versions prior to 15.40.46.5143, update to version 15.40.46.5143 or later.

Fix

Buffer Overflow

NULL Pointer Dereference

Weakness Enumeration

CWE-119

CWE-476

Related Identifiers

BDU:2021-00839

CVE-2020-12365

Affected Products

Intel Graphics Drivers

References · 6

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12365 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12365 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00839 · Security Note
• https://t.me/cvenotify/10305 · Telegram Post
• https://t.me/cibsecurity/23744 · Telegram Post