MEDIUM · 5.0

CVE-2024-28050

Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.

Vulnerability Description

Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.

CVSS Score

5.0

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
IntelArc A Graphics< 31.0.101.4824
IntelIris Xe Graphics< 31.0.101.4824

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-28050?

CVE-2024-28050 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.

How severe is CVE-2024-28050?

CVE-2024-28050 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-28050?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Arc A Graphics, Intel Iris Xe Graphics.