CVE-2018-12149 Memory corruption in Intel(R) Extreme Tuning Utility

What is CVE-2018-12149?

CVE-2018-12149 is a medium-severity memory corruption vulnerability in Intel(R) Extreme Tuning Utility, published on 12 Sep 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the application via local access.

Weakness: CWE-119

Which versions are affected by CVE-2018-12149?

It affects 1 product.

Products include Intel Extreme Tuning Utility.

How do I fix CVE-2018-12149?

No fix has been published for CVE-2018-12149 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-12149 being exploited?

There is no known exploitation of CVE-2018-12149 in the wild and no public exploit code.

Other vulnerabilities in Intel(R) Extreme Tuning Utility

• CVE-2020-12350 Privilege escalation in Intel(R) XTU High 7.8
• CVE-2022-22139 Privilege escalation in Intel(R) XTU software High 7.3
• CVE-2023-32647 Privilege escalation in Intel(R) XTU software Medium 6.8
• CVE-2024-21835 Privilege escalation in Intel(R) XTU software Medium 6.7
• CVE-2023-28407 Privilege escalation in Intel(R) XTU software Medium 6.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xmqf-6397-gmvx.