Lucene search

K
intelIntel Security CenterINTEL:INTEL-SA-00427
HistoryNov 10, 2020 - 12:00 a.m.

Intel CSI2 Host Controller Advisory

2020-11-1000:00:00
Intel Security Center
www.intel.com
9
intel
csi2 host controller
security vulnerability
information disclosure
software updates
cve-2020-0573
out of bounds read
driver
local access
cvss base score 6.5 medium
recommendations
coordinated disclosure
enrique nissim

EPSS

0

Percentile

12.6%

Summary:

A potential security vulnerability in the Intel Camera Serial Interface (CSI) 2 Host Controller driver may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability.

Vulnerability Details:

CVEID: CVE-2020-0573

Description: Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via local access.

CVSS Base Score: 6.5 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected Products:

Intel CSI2 Host Controller diver.

Recommendations:

Intel recommends that users of Intel CSI2 Host Controller diver update to the latest version provided by the system manufacturer that addresses these issues.

Acknowledgements:

Intel would like to thank Enrique Nissim for reporting this issue.


Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

EPSS

0

Percentile

12.6%

Related for INTEL:INTEL-SA-00427