Arbitrary Code Execution Vulnerability in Intel Smart Sound Technology
CVE-2018-3672

8.8HIGH

Key Information:

Vendor

Intel
Status
Smart Sound Technology
Vendor
CVE Published:
1 August 2018

What is CVE-2018-3672?

The Intel Smart Sound Technology driver module contains a vulnerability that could allow a local attacker to execute arbitrary code with elevated privileges. This can occur through improper handling of system calls in affected versions prior to 9.21.00.3541. Attackers exploiting this vulnerability could gain control over affected systems, leading to potential data breaches and compromise of system integrity.

Affected Version(s)

Smart Sound Technology before 9.21.00.3541

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.