CVE-2018-12152

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.

Weaknesses (CWE)

CWE-119

Affected Products (15)

intel · graphics_drivervulnerable

References (12)

http://seclists.org/fulldisclosure/2019/Oct/55

http://seclists.org/fulldisclosure/2019/Oct/56

http://www.securityfocus.com/bid/105582

Third Party AdvisoryVDB Entry

https://support.apple.com/kb/HT210634

https://support.apple.com/kb/HT210722

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html

MitigationVendor Advisory

http://seclists.org/fulldisclosure/2019/Oct/55

http://seclists.org/fulldisclosure/2019/Oct/56

http://www.securityfocus.com/bid/105582

Third Party Advisory