uefi_firmware vulnerabilities

2 known vulnerabilities in uefi_firmware from Ieisystem. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  UEFI firmware for some Intel(R) processors: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2023-41833Sep 16, 2024UEFI firmware for some Intel(R) Processors

  A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.

• 7.7 High severity

  uefi_firmware: Buffer Copy without Checking Size of Input

  CVE-2023-52080Apr 29, 2024Ieisystem

  IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory