Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2018-18089: Intel Graphics Driver could leak memory data
CVE-2018-18089 · published 7 years ago
Summary
The Intel graphics driver for Windows versions before the listed updates can read data it shouldn't, potentially revealing information to a user with local access. This might let an authenticated user see sensitive details stored in memory. Update the driver to the latest version provided by Intel to stop the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| intel | graphics_driver |
15.33.43.4425 15.33.45.4653 15.33.46.4885 15.36.26.4294 15.36.28.4332 15.36.31.4414 15.36.33.4578 15.36.34.4889 15.40.34.4624 15.40.36.4703 15.40.37.4835 15.40.38.4963 11 more version ranges
cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:* |
| intel corporation | intel(r) graphics driver for windows | Multiple versions. |
Original advisory text
Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063)...
Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published14 Mar 2019
Updated31 Oct 2026
First seen29 Sep 2026
Track software like this
Free during beta