CVE-2018-12201 Memory corruption in Intel Platform Sample / Silicon Reference firmware

Medium 6.7 Published 14 Mar 2019 Updated 16 Sep 2024

A buffer overflow in Intel processor firmware allows privileged local users to execute arbitrary code, requiring firmware updates to mitigate.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2018-12201?

CVE-2018-12201 is a medium-severity memory corruption vulnerability in Intel Platform Sample / Silicon Reference firmware, published on 14 Mar 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Buffer overflow vulnerability in Platform Sample / Silicon Reference firmware for 8th Generation Intel(R) Core Processor, 7th Generation Intel(R) Core Processor, Intel(R) Pentium(R) Silver J5005 Processor, Intel(R) Pentium(R) Silver N5000 Processor, Intel(R) Celeron(R) J4105 Processor, Intel(R) Celeron(R) J4005 Processor, Intel Celeron(R) N4100 Processor and Intel(R) Celeron N4000 Processor may allow privileged user to potentially execute arbitrary code via local access.

Weakness: CWE-119

Which versions are affected by CVE-2018-12201?

It affects 2 products.

Products include Intel Platform Sample Firmware, Intel Silicon Reference Firmware.

How do I fix CVE-2018-12201?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-12201 being exploited?

There is no known exploitation of CVE-2018-12201 in the wild and no public exploit code.

Sources

Also known as GHSA-hrvm-w5c3-w9jq, UBUNTU-CVE-2018-12201.