{"id":"CVE-2024-36292","state":"PUBLISHED","title":"Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable den","description":"Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access.","publishedAt":"2025-05-13T21:03:02.682Z","updatedAt":"2025-05-14T14:09:23.126Z","severity":{"score":8.2,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) Data Center GPU Flex Series for Windows driver"],"affected":[{"vendor":"n/a","product":"Intel(R) Data Center GPU Flex Series for Windows driver","defaultStatus":"unaffected","versions":[{"version":"before version 31.0.101.4314","status":"affected"}]}],"references":["https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T20:07:30.303Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/36xxx/CVE-2024-36292.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-36292","state":"PUBLISHED","datePublished":"2025-05-13T21:03:02.682Z","dateUpdated":"2025-05-14T14:09:23.126Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2024-09-26T03:00:15.786Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) Data Center GPU Flex Series for Windows driver","defaultStatus":"unaffected","versions":[{"version":"before version 31.0.101.4314","status":"affected"}]}],"references":[{"url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html","name":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"cvssV4_0":{"version":"4.0","baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Denial of Service"},{"cweId":"CWE-119","lang":"en","description":"Improper Restriction of Operations within the Bounds of a Memory Buffer","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2025-05-13T21:03:02.682Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-14T14:08:58.796197Z","id":"CVE-2024-36292","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-14T14:09:23.126Z"}}]}}}