CVE-2018-12152

Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.

Score

CVSS 3.0 7.8 High

Status

Modified - secure@intel.com

Published

2018-10-10

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Graphics Driver (Intel)
• Intel Graphics Driver (Intel Corporation)

References

• http://seclists.org/fulldisclosure/2019/Oct/55
• http://seclists.org/fulldisclosure/2019/Oct/56
• http://www.securityfocus.com/bid/105582
• https://support.apple.com/kb/HT210634
• https://support.apple.com/kb/HT210722
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html