PT-2023-7298 · Intel · Intel Arc & Iris Xe Graphics - Whql - Windows Drivers+1

Published 2023-11-14 · Updated 2024-05-16 · CVE-2022-42879

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Arc(TM) Control software versions prior to 1.73.5335.2 Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255

Description The issue is related to a NULL pointer dereference in the software, which may allow an authenticated user to potentially enable denial of service via local access. This could be exploited by an attacker to cause a service disruption.

Recommendations For Intel(R) Arc(TM) Control software versions prior to 1.73.5335.2, update to version 1.73.5335.2 or later to resolve the issue. For Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255, update to version 31.0.101.4255 or later to resolve the issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

CWE-395

Related Identifiers

BDU:2023-08326

CVE-2022-42879

Affected Products

Intel Arc & Iris Xe Graphics - Whql - Windows Drivers

Intel Arc Control

References · 7

• https://osv.dev/vulnerability/CVE-2022-42879 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08326 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-42879 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01020.html · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00864.html · Note
• https://t.me/cvenotify/61004 · Telegram Post
• https://t.me/cvenotify/80098 · Telegram Post