CVE-2024-1598

HIGH

Phoenix SecureCore Technology 4.1.0.1-4.1.0.566 - Stack-based Buffer Overflow in UEFI Variable Handling

Title source: llm
STIX 2.1

Description

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0024
EPSS Percentile 15.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-121
Status published
Products (1)
phoenixtech/securecore_technology 4.1.0.1 - 4.1.0.567
Published May 14, 2024
Tracked Since Feb 18, 2026