CVE-2018-12151 Memory corruption in Intel(R) Extreme Tuning Utility

What is CVE-2018-12151?

CVE-2018-12151 is a medium-severity memory corruption vulnerability in Intel(R) Extreme Tuning Utility, published on 12 Sep 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via local access.

Weakness: CWE-119

Which versions are affected by CVE-2018-12151?

It affects 1 product.

Products include Intel Extreme Tuning Utility.

How do I fix CVE-2018-12151?

No fix has been published for CVE-2018-12151 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-12151 being exploited?

There is no known exploitation of CVE-2018-12151 in the wild and no public exploit code.

Other vulnerabilities in Intel(R) Extreme Tuning Utility

• CVE-2020-12350 Privilege escalation in Intel(R) XTU High 7.8
• CVE-2022-22139 Privilege escalation in Intel(R) XTU software High 7.3
• CVE-2023-32647 Privilege escalation in Intel(R) XTU software Medium 6.8
• CVE-2024-21835 Privilege escalation in Intel(R) XTU software Medium 6.7
• CVE-2023-28407 Privilege escalation in Intel(R) XTU software Medium 6.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-69v3-4wj9-chvp.