Memory corruption in Intel Graphics Drivers
Priority LOW 25CWE-119Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Insufficient bounds checking in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable a denial of service via local access.
Why it matters now
EPSS 0.00338 27th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) Graphics Drivers | Versions before 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069). | — | No fix listed | CNA |
- Intel(R) Graphics Drivers Vendor— Affected Versions before 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069). Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:* | 15.33.43.4425 | Vulnerable | Intel |
| cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:* | 15.33.45.4653 | Vulnerable | Intel |
| cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:* | 15.33.46.4885 | Vulnerable | Intel |
| cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:* | 15.36.26.4294 | Vulnerable | Intel |
| cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:* | 15.36.28.4332 | Vulnerable | Intel |
| cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:* | 15.36.31.4414 | Vulnerable | Intel |
| cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:* | 15.36.33.4578 | Vulnerable | Intel |
| cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:* | 15.36.34.4889 | Vulnerable | Intel |
- cpe:2.3:a:intel:graphics_driver:15.33.43.4425:*:*:*:*:windows:*:* Versions 15.33.43.4425 Vulnerable ·Intel
- cpe:2.3:a:intel:graphics_driver:15.33.45.4653:*:*:*:*:windows:*:* Versions 15.33.45.4653 Vulnerable ·Intel
- cpe:2.3:a:intel:graphics_driver:15.33.46.4885:*:*:*:*:windows:*:* Versions 15.33.46.4885 Vulnerable ·Intel
- cpe:2.3:a:intel:graphics_driver:15.36.26.4294:*:*:*:*:windows:*:* Versions 15.36.26.4294 Vulnerable ·Intel
- cpe:2.3:a:intel:graphics_driver:15.36.28.4332:*:*:*:*:windows:*:* Versions 15.36.28.4332 Vulnerable ·Intel
- cpe:2.3:a:intel:graphics_driver:15.36.31.4414:*:*:*:*:windows:*:* Versions 15.36.31.4414 Vulnerable ·Intel
- cpe:2.3:a:intel:graphics_driver:15.36.33.4578:*:*:*:*:windows:*:* Versions 15.36.33.4578 Vulnerable ·Intel
- cpe:2.3:a:intel:graphics_driver:15.36.34.4889:*:*:*:*:windows:*:* Versions 15.36.34.4889 Vulnerable ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-0113
- 2026-10-03 Alias added: GHSA-9g8p-pq33-qfrc
References
More Intel Graphics Driver vulnerabilities
- TI-2018-08764 Logic bug in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions… CVSS 3.0HIGH 8.2
- TI-2018-08760 Improper input validation in Intel Graphics Driver for Windows CVSS 3.0HIGH 8.2
- TI-2018-08758 Memory corruption in Intel Graphics Driver for Windows CVSS 3.0HIGH 8.2
- TI-2017-03707 Incorrect type conversion in Intel Graphics Driver CVSS 3.0HIGH 7.8
- TI-2018-08706 Memory corruption in Intel Graphics Driver CVSS 3.0HIGH 7.8
- TI-2019-00135 Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th… CVSS 3.1HIGH 7.8
Sources
- CVE-2019-0113 · CVE Program
- CVE-2019-0113 · NVD
- FIRST EPSS
- GHSA-9g8p-pq33-qfrc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences