PT-2024-19712

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless Software versions prior to 23.40 IntelR KillerTM Wi-Fi products versions prior to 23.40 Description The issue is related to improper input validation in the firmware of certain Intel products. This may allow an...

CVE-2024-28952: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28049: Improper Input Validation

Improper input validation in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access...

CVE-2024-23919: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34776: Out-of-bounds Write

Out-of-bounds write in some IntelR SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-37024: Uncontrolled Search Path Element

Uncontrolled search path for some ACAT software maintained by IntelR for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-25563: Improper Initialization

Improper initialization in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-21808: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36294: Insecure Inherited Permissions

Insecure inherited permissions for some IntelR DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36276: Insecure Inherited Permissions

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-23918: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21799: Improper Limitation of a Pathname to a Restricted Directory

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-22185: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36482: Improper Input Validation

Improper input validation in some IntelR CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21853: Improper Finite State Machines (FSMs) in Hardware Logic

Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially enable denial of service via local access...

CVE-2024-21783: Integer Overflow or Wraparound

Integer overflow for some IntelR VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38387: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-33624: Improper Input Validation

Improper input validation for some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-29076: Uncaught Exception

Uncaught exception for some IntelR CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-35245: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially enable escalation of privilege via local access...