CVE-2019-11113

moderate-risk

Published 2019-11-14

Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged user to potentially enable information disclosure via local access.

Do I need to act?

0.25% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.4/10 Medium

LOCAL / LOW complexity

Affected Products (20)

Graphics Driver

Cloud Backup

Data Availability Services

Affected Vendors

Intel Netapp

References (4)

Third Party Advisory https://security.netapp.com/advisory/ntap-20200320-0005/

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242....

Third Party Advisory https://security.netapp.com/advisory/ntap-20200320-0005/

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00242....

/ 100

moderate-risk

Severity 15/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 20/34 · Moderate