Intel patches huge holes in GPU drivers
 

More holes than Blackburn Lancashire

Chipzilla has patched several high-severity vulnerabilities in its graphics drivers for Windows 10, which could lead to code execution.

Intel has patched 19 vulnerabilities across its popular graphics drivers for Windows 10, including two high-severity flaws.

According to an Intel advisory CVE-2018-12216 and CVE-2018-12214 allow a privileged user to execute arbitrary code via local access.

“Multiple potential security vulnerabilities in Intel Graphics Driver for Windows may allow escalation of privileges, denial-of-service or information disclosure”, Intel said in a Tuesday security advisory. “Intel is releasing Intel Graphics Driver for Windows updates to mitigate these potential vulnerabilities.”

Apparently the more serious of these (CVE-2018-12216) has a CVSS score of 8.2 and stems from insufficient input validation in the kernel mode driver within Intel Graphics Driver for Windows. The kernel mode driver of a graphics driver executes any instruction it needs on the CPU without waiting and can reference any memory address that is available.

https://fudzilla.com/news/graphics/4...in-gpu-drivers