Intel(R) Data Center GPU Flex Series for Windows driver

CVE-2024-36292
HIGH 8.2

At a glance

Source
NVD
EPSS
EPSS 0.17 % · percentile 7 ()
State
PUBLISHED
Published
Updated
Assigner
intel
NVD status
Deferred

Description

Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access.

Weaknesses (CWE)

  • CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Scores

VersionScoreVectorScored by
CVSS 4.0HIGH 8.2CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:Hintel
CVSS 3.1HIGH 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:Hintel
CVSS 4.0HIGH 8.2CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · secure@intel.com (Secondary)
CVSS 3.1HIGH 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:HNVD · secure@intel.com (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
Intel(R) Data Center GPU Flex Series for Windows driveraffected before version 31.0.101.4314

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD