CVE-2024-34170

Vulnerability

Details

CVE-2024-34170 describes improper buffer restrictions in certain Intel(R) Graphics Drivers [1]. This is a memory safety issue where the driver does not correctly enforce boundaries when handling data from a local user, leading to a potential buffer over-read or over-write condition.

Exploitation

Context

The vulnerability is exploitable only by an authenticated user with local access to the system [1]. No special privileges beyond standard user credentials are required. The attack surface is limited to the graphics driver interface, meaning the attacker must be able to execute code or manipulate driver input from the local console or a remote desktop session.

Impact

Successful exploitation can lead to a denial of service (DoS) condition, causing the graphics driver to crash or the system to become unresponsive [1]. The CVSS v3.1 base score is 6.6 (Medium), reflecting the need for authentication and local access but the potential for service disruption.

Mitigation

Intel has released driver updates to address this issue [1]. Users should apply the latest driver package from Intel's support site. No workarounds are documented, and this CVE is not currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.