What is CVE-2019-0116?

CVE-2019-0116 is a medium-severity vulnerability in Intel Graphics Driver, classified under Out-of-bounds Read. CVSS score: 4.4/10. Published 2019-05-17.

How severe is CVE-2019-0116?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Out-of-bounds Read in Intel Graphics Driver

CVE-2019-0116

An out of bound read in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow a privileged user to potentially enable denial of service via local access.

Vulnerability class: Buffer Overflow

EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.

Affected products

Intel Graphics_driver — versions 15.33.43.4425, 15.33.45.4653, 15.33.46.4885
N/a Intel(r) Graphics Driver Kmd Module — versions Versions before 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069).

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

secure@intel.com (x_refsource_MISC, Vendor Advisory)
secure@intel.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-0116?: CVE-2019-0116 is a medium-severity vulnerability in Intel Graphics Driver, classified under Out-of-bounds Read. CVSS score: 4.4/10. Published 2019-05-17.
How severe is CVE-2019-0116?: Medium severity. CVSS v3 base score is 4.4 out of 10.