CVE-2019-11111

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux	See provided reference

References

https://security.netapp.com/advisory/ntap-20200320-0005/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.htmlVendor Advisory
https://security.netapp.com/advisory/ntap-20200320-0005/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242.htmlVendor Advisory

Timeline

Published: Nov 14, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-111127.8Memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver before 26.20.100.6813 (DCH) or 26.20.100.6812 may allow an authenticated CVE-2019-111134.4Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may a CVE-2019-111144.4Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged user to potentially CVE-2019-111177.8Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an authenticated user to CVE-2019-111199.8Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthenticated user to potential CVE-2019-11125.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In CVE-2019-111207.8Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user t CVE-2019-111217.8Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to CVE-2019-111236.7Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of priv CVE-2019-111246.7Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, d CVE-2019-111256.7Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privil CVE-2019-111266.7Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege, denial