CVE-2018-12152
Last modified
CVE-2018-12152 is a vulnerability of currently unknown severity. Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.. EPSS estimates a 0.87% chance of exploitation in the next 30 days.
Description
Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Graphics Driver | 15.33.43.4425 |
| Intel | Graphics Driver | 15.33.45.4653 |
| Intel | Graphics Driver | 15.33.46.4885 |
| Intel | Graphics Driver | 15.33.47.5059 |
| Intel | Graphics Driver | 15.36.26.4294 |
| Intel | Graphics Driver | 15.36.28.4332 |
| Intel | Graphics Driver | 15.36.31.4414 |
| Intel | Graphics Driver | 15.36.33.4578 |
| Intel | Graphics Driver | 15.36.34.4889 |
| Intel | Graphics Driver | 15.36.35.5057 |
| Intel | Graphics Driver | 15.40.34.4624 |
| Intel | Graphics Driver | 15.40.36.4703 |
| Intel | Graphics Driver | 15.40.37.4835 |
| Intel | Graphics Driver | 15.40.38.4963 |
| Intel | Graphics Driver | 15.40.41.5058 |
References
- http://www.securityfocus.com/bid/105582Third Party Advisory, VDB Entry
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.htmlMitigation, Vendor Advisory
- http://www.securityfocus.com/bid/105582Third Party Advisory, VDB Entry
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.htmlMitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-12152?
How severe is CVE-2018-12152?
How do I fix CVE-2018-12152?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-12147Insufficient input validation in HECI subsystem in Intel(R) …
- CVE-2018-12148Privilege escalation in file permissions in Intel Driver and…
- CVE-2018-12149Buffer overflow in input handling in Intel Extreme Tuning Ut…
- CVE-2018-1215An arbitrary file upload vulnerability was discovered in vAp…
- CVE-2018-12150Escalation of privilege in Installer for Intel Extreme Tunin…
- CVE-2018-12151Buffer overflow in installer for Intel Extreme Tuning Utilit…
- CVE-2018-12153Denial of Service in Unified Shader Compiler in Intel Graphi…
- CVE-2018-12154Denial of Service in Unified Shader Compiler in Intel Graphi…
- CVE-2018-12155Data leakage in cryptographic libraries for Intel IPP before…
- CVE-2018-12156Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12157Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12158Insufficient input validation in BIOS update utility in Inte…
Are you affected by CVE-2018-12152?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
