Intel Graphics Drivers Denial of Service Vulnerability

Intel Graphics Drivers is Intel's official driver for users of Arc series graphics cards, Iris Xe graphics cards and Core Ultra processors with Arc GPUs. A denial of service vulnerability exists in Intel Graphics Drivers, which stems from a null pointer dereference, and can be exploited by an...

CVE-2024-25624

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Due to an improper setup of Jinja2 environment, reports generation in iris-web is prone to a Server Side Template Injection SSTI. Successful exploitation of the vulnerability c...

CVE-2024-25640

Iris is a web collaborative platform that helps incident responders share technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations in versions prior to v2.4.0. The vulnerability may allow an attacker to...

CVE-2023-30615

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...

CVE-2023-28404

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-34849

Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-0076

In getauthresult of the FPC IRIS TrustZone app, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2020-0077

In authorizeenroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2020-0075

In setsharedkey of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2019-15374

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to...

CVE-2019-15362

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88go/iris88go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a...

CVE-2019-18924

Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ and variations, it is possible to list all the directories and check if a particular file exists...

CVE-2019-15338

The Lava Iris 88 Lite Android device with a build fingerprint of LAVA/iris88lite/iris88lite:8.1.0/O11019/1536323070:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the devic...

CVE-2019-15334

The Lava Iris 88 Go Android device with a build fingerprint of LAVA/iris88go/iris88go:8.1.0/O11019/1538188945:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to...

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software lies in an uncontrollable search path element, which allows attackers to exploit their privileges.

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software relates to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software related to access segmentation flaws allows attackers to trigger service failures.

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to cause service failures...

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software lies in an uncontrollable search path element, which allows attackers to exploit their privileges.

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software relates to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software related to access segmentation flaws allows attackers to trigger service failures.

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to cause service failures...

CVE-2024-39758

Improper access control for some IntelR Arc™ & IrisR Xe graphics software before version 31.0.101.4032 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-46895

Uncontrolled search path for some IntelR Arc™ & IrisR Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an authenticated user to potentially enable escalation of privilege via local access...