CVE-2018-12154
Last modified
CVE-2018-12154 is a vulnerability of currently unknown severity. Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user to potentially create an infinite loop and crash an application via local access.. EPSS estimates a 0.48% chance of exploitation in the next 30 days.
Description
Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user to potentially create an infinite loop and crash an application via local access.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Graphics Driver | 15.33.43.4425 |
| Intel | Graphics Driver | 15.33.45.4653 |
| Intel | Graphics Driver | 15.33.46.4885 |
| Intel | Graphics Driver | 15.36.26.4294 |
| Intel | Graphics Driver | 15.36.28.4332 |
| Intel | Graphics Driver | 15.36.31.4414 |
| Intel | Graphics Driver | 15.36.33.4578 |
| Intel | Graphics Driver | 15.36.34.4889 |
| Intel | Graphics Driver | 15.40.34.4624 |
| Intel | Graphics Driver | 15.40.36.4703 |
| Intel | Graphics Driver | 15.40.37.4835 |
| Intel | Graphics Driver | 15.40.38.4963 |
References
- http://www.securityfocus.com/bid/105582Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/105582Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-12154?
How severe is CVE-2018-12154?
How do I fix CVE-2018-12154?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-12149Buffer overflow in input handling in Intel Extreme Tuning Ut…
- CVE-2018-1215An arbitrary file upload vulnerability was discovered in vAp…
- CVE-2018-12150Escalation of privilege in Installer for Intel Extreme Tunin…
- CVE-2018-12151Buffer overflow in installer for Intel Extreme Tuning Utilit…
- CVE-2018-12152Pointer corruption in Unified Shader Compiler in Intel Graph…
- CVE-2018-12153Denial of Service in Unified Shader Compiler in Intel Graphi…
- CVE-2018-12155Data leakage in cryptographic libraries for Intel IPP before…
- CVE-2018-12156Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12157Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12158Insufficient input validation in BIOS update utility in Inte…
- CVE-2018-12159Buffer overflow in the command-line interface for Intel(R) P…
- CVE-2018-1216A hard-coded password vulnerability was discovered in vApp M…
Are you affected by CVE-2018-12154?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
