CVE-2020-12362: intel graphics_drivers Integer Overflow or Wraparound
Vulnerability summary
CVE-2020-12362 is a high (CVSS 7.8) Integer Overflow or Wraparound vulnerability in intel graphics_drivers. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 29.7% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 19 · Related 6Timeline
- 17-02-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version 26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · Red hatEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.36%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.36% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu65 products
- linuxAll versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.3All versions (No fix recorded)
Redhat17 products
- kernel< 0:3.10.0-514.89.1.el7
- kernel-abi-whitelists< 0:3.10.0-514.89.1.el7
- kernel-debug< 0:3.10.0-514.89.1.el7
- kernel-debug-debuginfo< 0:3.10.0-514.89.1.el7
- kernel-debug-devel< 0:3.10.0-514.89.1.el7
Debian2 products
- firmware-nonfree< 20210208-1
- linux< 5.14.6-1
Intel1 product
- graphics_drivers< 26.20.100.7212
4 vendors · 85 products