CVE-2018-3611

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial of service via local access.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Intel Corporation	Intel Graphics Driver	15.40.x.4; 21.20.x.x

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00109.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00109.htmlVendor Advisory

Timeline

Published: May 15, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-36127.8Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Ma CVE-2018-36137.8Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation o CVE-2018-36157.3Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosu CVE-2018-36165.9Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unaut CVE-2018-36194.6Information disclosure vulnerability in storage media in systems with Intel Optane memory module with Whole Disk Encryption may allow an att CVE-2018-36205.6Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information resid CVE-2018-36216.5Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable CVE-2018-36248.3Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially exec CVE-2018-36264.7Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel p CVE-2018-36278.2Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.CVE-2018-36288.8Buffer overflow in HTTP handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5.CVE-2018-36296.5Buffer overflow in event handler in Intel Active Management Technology in Intel Converged Security Manageability Engine Firmware 3.x, 4.x, 5