---
id: CVE-2018-18089
title: >-
  Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for
  Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka
  15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064)
  and 24.…
summary: >-
  Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for
  Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka
  15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064)
  and 24.…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-125
vendor: intel
product: graphics_driver
affected:
  - graphics_driver = 15.33.43.4425
  - graphics_driver = 15.33.45.4653
  - graphics_driver = 15.33.46.4885
  - graphics_driver = 15.36.26.4294
  - graphics_driver = 15.36.28.4332
  - graphics_driver = 15.36.31.4414
  - graphics_driver = 15.36.33.4578
  - graphics_driver = 15.36.34.4889
  - graphics_driver = 15.40.34.4624
  - graphics_driver = 15.40.36.4703
  - graphics_driver = 15.40.37.4835
  - graphics_driver = 15.40.38.4963
  - graphics_driver = 15.40.41.5058
  - graphics_driver = 15.45.18.4664
  - graphics_driver = 15.45.19.4678
  - graphics_driver = 15.45.21.4821
  - graphics_driver = 15.45.23.4860
  - graphics_driver = 24.20.100.6025
  - graphics_driver = 24.20.100.6094
  - graphics_driver = 24.20.100.6136
  - graphics_driver = 24.20.100.6194
  - graphics_driver = 24.20.100.6229
  - graphics_driver = 24.20.100.6286
published: '2019-03-14'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T18:17:14.707'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2018-18089'
references:
  - url: 'https://support.lenovo.com/us/en/product_security/LEN-25084'
    label: secure@intel.com
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html
    label: secure@intel.com
  - url: 'https://support.lenovo.com/us/en/product_security/LEN-25084'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00189.html
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-15T17:35:02.871103Z'
epss: 0.00325
epssPercentile: 0.23995
ingestedAt: '2026-10-15T18:23:58.411Z'
---

## Overview

Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may allow an authenticated user to potentially enable information disclosure via local access.

## Affected

- `graphics_driver = 15.33.43.4425`
- `graphics_driver = 15.33.45.4653`
- `graphics_driver = 15.33.46.4885`
- `graphics_driver = 15.36.26.4294`
- `graphics_driver = 15.36.28.4332`
- `graphics_driver = 15.36.31.4414`
- `graphics_driver = 15.36.33.4578`
- `graphics_driver = 15.36.34.4889`
- `graphics_driver = 15.40.34.4624`
- `graphics_driver = 15.40.36.4703`
- `graphics_driver = 15.40.37.4835`
- `graphics_driver = 15.40.38.4963`
- `graphics_driver = 15.40.41.5058`
- `graphics_driver = 15.45.18.4664`
- `graphics_driver = 15.45.19.4678`
- `graphics_driver = 15.45.21.4821`
- `graphics_driver = 15.45.23.4860`
- `graphics_driver = 24.20.100.6025`
- `graphics_driver = 24.20.100.6094`
- `graphics_driver = 24.20.100.6136`
- `graphics_driver = 24.20.100.6194`
- `graphics_driver = 24.20.100.6229`
- `graphics_driver = 24.20.100.6286`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.