Intel patches huge holes in GPU drivers

Stefan Mileschin · 18th March 2019, 08:22

More holes than Blackburn Lancashire

Chipzilla has patched several high-severity vulnerabilities in its graphics drivers for Windows 10, which could lead to code execution.

Intel has patched 19 vulnerabilities across its popular graphics drivers for Windows 10, including two high-severity flaws.

According to an Intel advisory CVE-2018-12216 and CVE-2018-12214 allow a privileged user to execute arbitrary code via local access.

“Multiple potential security vulnerabilities in Intel Graphics Driver for Windows may allow escalation of privileges, denial-of-service or information disclosure”, Intel said in a Tuesday security advisory. “Intel is releasing Intel Graphics Driver for Windows updates to mitigate these potential vulnerabilities.”

Apparently the more serious of these (CVE-2018-12216) has a CVSS score of 8.2 and stems from insufficient input validation in the kernel mode driver within Intel Graphics Driver for Windows. The kernel mode driver of a graphics driver executes any instruction it needs on the CPU without waiting and can reference any memory address that is available.

https://fudzilla.com/news/graphics/4...in-gpu-drivers

18th March 2019, 08:22	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,618	Intel patches huge holes in GPU drivers More holes than Blackburn Lancashire Chipzilla has patched several high-severity vulnerabilities in its graphics drivers for Windows 10, which could lead to code execution. Intel has patched 19 vulnerabilities across its popular graphics drivers for Windows 10, including two high-severity flaws. According to an Intel advisory CVE-2018-12216 and CVE-2018-12214 allow a privileged user to execute arbitrary code via local access. “Multiple potential security vulnerabilities in Intel Graphics Driver for Windows may allow escalation of privileges, denial-of-service or information disclosure”, Intel said in a Tuesday security advisory. “Intel is releasing Intel Graphics Driver for Windows updates to mitigate these potential vulnerabilities.” Apparently the more serious of these (CVE-2018-12216) has a CVSS score of 8.2 and stems from insufficient input validation in the kernel mode driver within Intel Graphics Driver for Windows. The kernel mode driver of a graphics driver executes any instruction it needs on the CPU without waiting and can reference any memory address that is available. https://fudzilla.com/news/graphics/4...in-gpu-drivers

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Three more security holes found in Intel chips	Stefan Mileschin	WebNews	0	16th August 2018 07:15
Intel’s 5G prototype hides huge external antenna	Stefan Mileschin	WebNews	0	6th March 2018 05:13
Intel makes huge 5G promises for the 2020 Olympics	Stefan Mileschin	WebNews	0	27th February 2018 19:36
Intel has another go at patches	Stefan Mileschin	WebNews	0	14th February 2018 19:14
The Moto E4 Plus offers a huge battery without a huge price tag	Stefan Mileschin	WebNews	0	14th June 2017 06:05
Hungry, hungry black holes gobble up huge gas and dust donuts	Stefan Mileschin	WebNews	0	4th May 2015 06:26
Intel's reinvention of the all-in-one PC is slim, portable and still huge	Stefan Mileschin	WebNews	0	17th November 2014 07:17
Intel Future Socket R (2011) To Use LGA1366 HSF Mounting Holes	jmke	WebNews	2	21st September 2009 07:45
Intel P4 Prescott drivers 5.1.2600	jmke	WebNews	0	19th May 2004 10:40
INFO: OS Updates + Drivers + Patches	Bosw8er	FAQ / INFO / HOW-TO	0	22nd March 2003 23:29