{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-36292","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","state":"PUBLISHED","assignerShortName":"intel","dateReserved":"2024-09-26T03:00:15.786Z","datePublished":"2025-05-13T21:03:02.682Z","dateUpdated":"2025-05-14T14:09:23.126Z"},"containers":{"cna":{"providerMetadata":{"orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","shortName":"intel","dateUpdated":"2025-05-13T21:03:02.682Z"},"problemTypes":[{"descriptions":[{"lang":"en","description":"Denial of Service"},{"lang":"en","description":"Improper Restriction of Operations within the Bounds of a Memory Buffer","cweId":"CWE-119","type":"CWE"}]}],"affected":[{"vendor":"n/a","product":"Intel(R) Data Center GPU Flex Series for Windows driver","versions":[{"version":"before version 31.0.101.4314","status":"affected"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access."}],"references":[{"name":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html","url":"https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"cvssV4_0":{"version":"4.0","baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","subAvailabilityImpact":"HIGH"}}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-14T14:08:58.796197Z","id":"CVE-2024-36292","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-14T14:09:23.126Z"}}]}}