PT-2026-24495 · Intel · Intel Reference Platforms Uefi Dxe Module

Publicado 2026-03-10 · Atualizado 2026-03-10 · CVE-2025-20073

Positive Technologies (AI Summary)

CVSS v4.0

1.8

Baixa

Vetor base

AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Intel(R) Reference Platforms UEFI DXE module (affected versions not specified)

Description An issue exists in the UEFI DXE module for some Intel(R) Reference Platforms. An improper buffer restriction may allow information disclosure. A system software adversary with privileged user access and a high complexity attack may enable data exposure. This requires local access and does not require user interaction or special internal knowledge. The issue may impact system confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2025-20073

Produtos afetados

Intel Reference Platforms Uefi Dxe Module

Referências · 4

• https://t.me/CVEtracker/47047 · Publicação no Telegram
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01234.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-20073 · Nota de Segurança
• https://twitter.com/CVEnew/status/2031504052509360204 · Publicação no Twitter