CVE-2017-13878
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read and system crash).
Risk Assessment
Organizations may be at risk of unauthorized memory access and potential system crashes, leading to data loss or downtime.
Recommendation
It is recommended to update macOS to version 10.13.2 or later to mitigate this vulnerability.
Other vulnerabilities in Intel Graphics Driver
See all- CVE-2017-7163High
An issue was discovered in certain Apple products, including macOS before version 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7155High
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-13883High
An issue was discovered in certain Apple products, including macOS before version 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-13875High
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted app.
- CVE-2017-5717High
A 'Type Confusion' vulnerability in the Content Protection HECI Service in Intel Graphics Driver allows an unprivileged user to elevate privileges via local access.
- CVE-2017-7044High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7035High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7017High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7014High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-2503High
An issue was discovered in certain Apple products, including macOS before 10.12.5, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read and system crash).