Intel-SA-01132: Intel Graphics Driver Privilege Escalation & DoS (CVE-2024-38665, CVE-2024-23919, CVE-2024-34023, CVE-2024-34170)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: INTEL-SA-01132 2. Affected Software: Intel® Graphics Software 3. Vulnerability Type: Escalation of Privilege, Denial of Service 4. Severity: HIGH 5. Original Release Date: 11/12/2024 6. Most Recent Revision Date: 11/12/2024 7. Vulnerability Description: - CVE-2024-38665: Out-of-bounds write in some Intel® Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access. - CVE-2024-23919: Improper buffer restrictions in some Intel® Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access. - CVE-2024-34023: Untrusted pointer dereference in some Intel® Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access. - CVE-2024-34170: Improper buffer restrictions in some Intel® Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. 8. Affected Products: - Intel® 7th-10th Gen Processor Graphics for Windows driver before version 31.0.101.2128 - Intel® Arc™ & Iris® Xe Graphics for Windows driver before version 31.0.101.5518 - Intel® Arc™ Pro Graphics for Windows driver before version 31.0.101.5525 - Intel® Data Center GPU Flex Series for Windows driver before version 31.0.101.5522 - Intel® Media Driver for VA-API software before version 24.1.1 9. Recommended Remediation: - Update Intel® 7th-10th Gen Processor Graphics for Windows driver to version 31.0.101.2128 or later. - Update Intel® Arc™ & Iris® Xe Graphics for Windows driver to version 31.0.101.5518 or later. - Update Intel® Arc™ Pro Graphics for Windows driver to version 31.0.101.5525 or later. - Update Intel® Data Center GPU Flex Series for Windows driver to version 31.0.101.5522 or later. - Update Intel® Media Driver for VA-API software to version 24.1.1 or later. 10. Contact Information: - Report Vulnerability: secure@intel.com - Product Support: Support & Downloads This information helps users understand the details of the vulnerability, the affected products, and how to resolve these issues.

Goal Reached Thanks to every supporter — we hit 100%!

Intel-SA-01132: Intel Graphics Driver Privilege Escalation & DoS (CVE-2024-38665, CVE-2024-23919, CVE-2024-34023, CVE-2024-34170)