Read the docs
TI-2019-08317 Aliases CVE-2019-11113GHSA-4m58-8hvf-gqv5

Memory corruption in 2019.2 IPU – Intel Graphics Driver for Windows* and Linux

Priority LOW 20CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged user to potentially enable information disclosure via local access.

Why it matters now

EPSS 0.00354 29th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—2019.2 IPU – Intel(R) Graphics Driver for Windows* and LinuxSee provided reference—No fix listedCNA
  • 2019.2 IPU – Intel(R) Graphics Driver for Windows* and Linux Vendor— Affected See provided reference Fixed in — No fix listed CNA

CPE configurations NVD · 23

CPEVersionsRoleVendor
cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:windows:*:*before 25.20.100.6618VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.22.54.64.2622:*:*:*:*:windows:*:*15.22.54.64.2622VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.22.54.2622:*:*:*:*:windows:*:*15.22.54.2622VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.22.58.64.2993:*:*:*:*:windows:*:*15.22.58.64.2993VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.22.58.2993:*:*:*:*:windows:*:*15.22.58.2993VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.28.24.64.4229:*:*:*:*:windows:*:*15.28.24.64.4229VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.28.24.4229:*:*:*:*:windows:*:*15.28.24.4229VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.33.48.5069:*:*:*:*:windows:*:*15.33.48.5069VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.36.36.5067:*:*:*:*:windows:*:*15.36.36.5067VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.36.37.5074:*:*:*:*:windows:*:*15.36.37.5074VulnerableIntel
  • cpe:2.3:a:intel:graphics_driver:*:*:*:*:*:windows:*:* Versions before 25.20.100.6618 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.22.54.64.2622:*:*:*:*:windows:*:* Versions 15.22.54.64.2622 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.22.54.2622:*:*:*:*:windows:*:* Versions 15.22.54.2622 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.22.58.64.2993:*:*:*:*:windows:*:* Versions 15.22.58.64.2993 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.22.58.2993:*:*:*:*:windows:*:* Versions 15.22.58.2993 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.28.24.64.4229:*:*:*:*:windows:*:* Versions 15.28.24.64.4229 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.28.24.4229:*:*:*:*:windows:*:* Versions 15.28.24.4229 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.33.48.5069:*:*:*:*:windows:*:* Versions 15.33.48.5069 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.36.36.5067:*:*:*:*:windows:*:* Versions 15.36.36.5067 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.36.37.5074:*:*:*:*:windows:*:* Versions 15.36.37.5074 Vulnerable ·Intel
Show 13 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:intel:graphics_driver:15.40.1.64.4256:*:*:*:*:windows:*:*15.40.1.64.4256VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.40.7.64.4279:*:*:*:*:windows:*:*15.40.7.64.4279VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.40.14.4352:*:*:*:*:windows:*:*15.40.14.4352VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.40.26.4474:*:*:*:*:windows:*:*15.40.26.4474VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.40.42.5063:*:*:*:*:windows:*:*15.40.42.5063VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.45.26.5065:*:*:*:*:windows:*:*15.45.26.5065VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.45.27.5068:*:*:*:*:windows:*:*15.45.27.5068VulnerableIntel
cpe:2.3:a:intel:graphics_driver:15.45.29.5077:*:*:*:*:windows:*:*15.45.29.5077VulnerableIntel
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*not specified by NVDRunning onNetApp
  • cpe:2.3:a:intel:graphics_driver:15.40.1.64.4256:*:*:*:*:windows:*:* Versions 15.40.1.64.4256 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.40.7.64.4279:*:*:*:*:windows:*:* Versions 15.40.7.64.4279 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.40.14.4352:*:*:*:*:windows:*:* Versions 15.40.14.4352 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.40.26.4474:*:*:*:*:windows:*:* Versions 15.40.26.4474 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.40.42.5063:*:*:*:*:windows:*:* Versions 15.40.42.5063 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.45.26.5065:*:*:*:*:windows:*:* Versions 15.45.26.5065 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.45.27.5068:*:*:*:*:windows:*:* Versions 15.45.27.5068 Vulnerable ·Intel
  • cpe:2.3:a:intel:graphics_driver:15.45.29.5077:*:*:*:*:windows:*:* Versions 15.45.29.5077 Vulnerable ·Intel
  • cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-11113
  2. 2026-10-03 Alias added: GHSA-4m58-8hvf-gqv5

References

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences