PT-2021-2162 · Intel · Intel Graphics Drivers

Steffen Schulz + 1 · Published 2021-02-09 · Updated 2021-02-22 · CVE-2020-12368

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 26.20.100.8141

Description The issue is related to an integer overflow in some Intel Graphics Drivers, which may allow a privileged user to potentially enable an escalation of privilege via local access. This is also described as a buffer overflow vulnerability in memory operations.

Recommendations For versions prior to 26.20.100.8141, update to version 26.20.100.8141 or later to resolve the issue.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2021-01055

CVE-2020-12368

Affected Products

Intel Graphics Drivers

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01055 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12368 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12368 · Security Note
• https://t.me/cibsecurity/23711 · Telegram Post