CVE-2023-25071

CWE-395 CWE-476 — NULL Pointer Dereference3 documents3 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 77.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel ARC A Graphics Intel Iris XE Graphics

Timeline

PublishedNov 14

Description

NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 1.1 | Impact: 4.0

Affected Packages3 packages

▶CVEListV5intel(r)_arc(tm)_&_iris(r)_xe_graphics_-_whql_-_windows_drviersbefore version 31.0.101.4255

▶NVDintel/iris_xe_graphics< 31.0.101.4255

▶NVDintel/arc_a_graphics< 31.0.101.4255

🔴Vulnerability Details

GHSA

GHSA-5rcg-jq54-2r8g: NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31↗2023-11-14

▶

CVEList

CVE-2023-25071: NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31↗2023-11-14

▶