Lucene search

[email protected]CVE-2022-30531

HistoryFeb 16, 2023 - 8:15 p.m.

CVE-2022-30531

2023-02-1620:15:14

CWE-125

[email protected]

web.nvd.nist.gov

cve-2022-30531

out-of-bounds read

intel

irisxe max drivers

windows

information disclosure

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Out-of-bounds read in the Intel® Iris® Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access.

Affected configurations

Vulners

NVD

Node

inteliris_xe_max_dedicated_graphicsRange<100.0.5.1474

CPENameOperatorVersion
intel:iris_xe_max_dedicated_graphicsintel iris xe max dedicated graphicslt100.0.5.1474

CPE	Name	Operator	Version
intel:iris_xe_max_dedicated_graphics	intel iris xe max dedicated graphics	lt	100.0.5.1474

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Iris(R) Xe MAX drivers for Windows",
    "versions": [
      {
        "version": "before version 100.0.5.1474",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00727.html

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2022-30531

cvelist1 prion1 nvd1 intel1