CVE-2019-0153

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
May 17, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-01545.5Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor FaCVE-2019-01557.8Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor CVE-2019-01575.5Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable a denial of serviceCVE-2019-01587.8Insufficient path checking in the installation package for Intel(R) Graphics Performance Analyzer for Linux version 18.4 and before may alloCVE-2019-01597.8Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version 24.3 may allow an authenticateCVE-2019-01609.8Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of CVE-2019-01615.5Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.CVE-2019-01623.8Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable information disclosurCVE-2019-01638.2Insufficient input validation in system firmware for Intel(R) Broadwell U i5 vPro before version MYBDWi5v.86A may allow an authenticated useCVE-2019-01647.3Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authentiCVE-2019-01654.4Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to CVE-2019-01667.5Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthe