Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2017-5717 — Incorrect Type Conversion or Cast in Corporation Intel Graphics Driver

CWE-704 — Incorrect Type Conversion or Cast4 documents4 sources

Severity

7.8HIGHNVD

EPSS

0.2%

top 55.57%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Intel Corporation Intel Graphics Driver Intel Graphics Driver

Timeline

PublishedDec 12

Latest updateMay 14

Description

Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDintel/graphics_driver7 versions+6

▶CVEListV5intel_corporation/intel_graphics_driver15.49/15.47/15.46/15.45/15.40/15.36/15.33

🔴Vulnerability Details

GHSA

GHSA-p7rr-mjwc-j7xm: Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access↗2022-05-14

▶

CVEList

CVE-2017-5717: Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access↗2017-12-12

▶

💥Exploits & PoCs

Exploit-DB

Intel Content Protection HECI Service - Type Confusion Privilege Escalation↗2017-12-19

▶