CVE-2017-5717 describes a type confusion vulnerability within the Intel Graphics Driver's Content Protection HECI Service, affecting Intel graphics products. This high-severity flaw (CVSS 7.8) allows an unprivileged local attacker to achieve privilege escalation with high impact on confidentiality, integrity, and availability. While not listed on the KEV catalog, public exploit code exists (EDB-43373), and the vulnerability has garnered some community discussion and media coverage, notably in relation to broader chip flaws like Meltdown and Spectre.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
15.33CPE matchmatch criteria | cpe:2.3:a:intel:graphics_driver:15.33:*:*:*:*:*:*:* | ||
15.36CPE matchmatch criteria | cpe:2.3:a:intel:graphics_driver:15.36:*:*:*:*:*:*:* | ||
15.40CPE matchmatch criteria | cpe:2.3:a:intel:graphics_driver:15.40:*:*:*:*:*:*:* | ||
15.45CPE matchmatch criteria | cpe:2.3:a:intel:graphics_driver:15.45:*:*:*:*:*:*:* | ||
15.46CPE matchmatch criteria | cpe:2.3:a:intel:graphics_driver:15.46:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.