Buffer overflow in Intel Celeron
CVE-2018-12201
Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.005 (44.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 44th percentile — 44.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Intel Celeron — versions j4005, j4105, n4000
- Intel Core I3 — versions 8100, 8100h, 8100t
- Intel Core I5 — versions 8200y, 8250u, 8259u
- Intel Core I7 — versions 8086k, 8500y, 8550u
- Intel Pentium Silver — versions j5005, n5000
- Intel Platform Sample Firmware
- Intel Silicon Reference Firmware
- Intel Corporation Platform Sample / Silicon Reference Firmware — versions Multiple versions.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2018-12201?
- CVE-2018-12201 is a medium-severity vulnerability in Intel Celeron, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 6.7/10. Published 2019-03-14.
- How severe is CVE-2018-12201?
- Medium severity. CVSS v3 base score is 6.7 out of 10.