CVE-2018-12152

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Intel Corporation	Intel Graphics Driver	Various

References

http://seclists.org/fulldisclosure/2019/Oct/55
http://seclists.org/fulldisclosure/2019/Oct/56
http://www.securityfocus.com/bid/105582Third Party Advisory, VDB Entry
https://support.apple.com/kb/HT210634
https://support.apple.com/kb/HT210722
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.htmlMitigation, Vendor Advisory
http://seclists.org/fulldisclosure/2019/Oct/55
http://seclists.org/fulldisclosure/2019/Oct/56
http://www.securityfocus.com/bid/105582Third Party Advisory, VDB Entry
https://support.apple.com/kb/HT210634
https://support.apple.com/kb/HT210722
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.htmlMitigation, Vendor Advisory

Timeline

Published: Oct 10, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-121536.5Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.505 CVE-2018-121545.5Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.505 CVE-2018-121555.5Data leakage in cryptographic libraries for Intel IPP before 2019 update1 release may allow an authenticated user to potentially enable info CVE-2018-121586.0Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to pote CVE-2018-121595.5Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated user to potentially CVE-2018-12169.8A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enab CVE-2018-121605.3DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated CVE-2018-121616.5Insufficient session validation in the webserver component of the Intel Rapid Web Server 3 may allow an unauthenticated user to potentially CVE-2018-121627.8Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially exe CVE-2018-121634.8A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileg CVE-2018-121664.4Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to poten CVE-2018-121674.4Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potential