CVE-2018-12152

HIGH 7.8CVE-2018-12152 · Published 10/10/2018 · updated 17/06/2026

In short

CVE-2018-12152 is a HIGH (CVSS 7.8) vulnerability affecting graphics driver (intel).
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 58.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
graphics driver intel	`= 15.33.43.4425= 15.33.45.4653= 15.33.46.4885= 15.33.47.5059= 15.36.26.4294= 15.36.28.4332= 15.36.31.4414= 15.36.33.4578= 15.36.34.4889= 15.36.35.5057= 15.40.34.4624= 15.40.36.4703= 15.40.37.4835= 15.40.38.4963= 15.40.41.5058`	No fix yet

Description

Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.

References

seclists.org/fulldisclosure/2019/Oct/55
seclists.org/fulldisclosure/2019/Oct/56
securityfocus.com/bid/105582 · Third Party Advisory
support.apple.com/kb/HT210634
support.apple.com/kb/HT210722
intel.com/content/www/us/en/security-center/advisory/intel-sa-00166.html · Mitigation

More vulnerabilities in graphics driver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

graphics driver

intel

= 15.33.43.4425= 15.33.45.4653= 15.33.46.4885= 15.33.47.5059= 15.36.26.4294= 15.36.28.4332= 15.36.31.4414= 15.36.33.4578= 15.36.34.4889= 15.36.35.5057= 15.40.34.4624= 15.40.36.4703= 15.40.37.4835= 15.40.38.4963= 15.40.41.5058

No fix yet

More vulnerabilities in graphics driver

See all →