Skip to content
OpenAdvisories
Medium WID-SEC-2025-1029 19 CVEs

Intel Graphics Driver: Mehrere Schwachstellen

Published May 13, 2025 · Updated Sep 18, 2025 · Revision 4 · de-DE

Vendor: Dell Vendor: HP Vendor: Intel Vendor: Lenovo Product: Computer Product: Computer Product: Computer Product: Graphics Driver Product: PowerEdge Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Grafiktreibern ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen oder Informationen offenzulegen.

Product

Intel ist ein Hersteller von Grafikkarten. Ein Grafiktreiber, ist eine Software, die eine Interaktion mit angeschlossenen, eingebauten (Hardware) oder virtuellen Geräten ermöglicht.

Vulnerabilities 19

  • High 8.4
    CVE-2025-20018

    Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable …

  • High 8.4
    CVE-2025-20101

    Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information…

  • High 8.2
    CVE-2025-20003

    Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers ma…

  • High 7.3
    CVE-2024-36292

    Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4…

    Windows
  • High 7.3
    CVE-2024-45333

    Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 m…

    Windows
  • High 7.3
    CVE-2025-20052

    Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denia…

  • Medium 6.7
    CVE-2024-28954

    Incorrect default permissions for some Intel(R) Graphics Driver installers may allow an authenticated user to potential…

  • Medium 6.7
    CVE-2024-45371

    Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allo…

  • Medium 6.7
    CVE-2024-46895

    Uncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.10…

  • Medium 6.7
    CVE-2024-47800

    Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enab…

  • Medium 6.7
    CVE-2025-20041

    Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphic…

  • Medium 6.7
    CVE-2025-21099

    Uncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to potentially enable esca…

  • Medium 6.5
    CVE-2025-20031

    Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable deni…

  • Medium 6.5
    CVE-2025-20071

    NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denia…

  • Medium 6.1
    CVE-2024-29222

    Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable de…

  • Medium 5.9
    CVE-2024-39758

    Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 31.0.101.4032 may allo…

  • Medium 5.6
    CVE-2024-28036

    Improper conditions check for some Intel(R) Arc™ GPU may allow an authenticated user to potentially enable denial of se…

  • Medium 5.3
    CVE-2024-43101

    Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver software before version 31.0.1…

    Windows
  • Low 3.8
    CVE-2024-31150

    Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable inf…

Revision history

  1. #4

    Neue Updates von HP aufgenommen

  2. #3

    Neue Updates von Dell aufgenommen

  3. #2

    Neue Updates von LENOVO aufgenommen

  4. #1

    Initiale Fassung

References