CVE-2024-31150

LowCVSS 3.8/10Last modified Jun 17, 2026

Description

Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 3.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-311519.8A security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows attackers to gain unauthorized access during the CVE-2024-311527.5The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series CVE-2024-311535.5Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentia CVE-2024-311547.5Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a privileged user to potentially enable escalation o CVE-2024-311557.5Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation CVE-2024-311568.0A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker CVE-2024-311575.3Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable i CVE-2024-311587.5Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow a privileged user to potentially enable es CVE-2024-311594.8The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrativ CVE-2024-31169.8pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE) vulnerability through the validate binary path API. This vulnerability allows a CVE-2024-311604.8The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrativ CVE-2024-311617.2The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exp