PT-2026-24491 · Intel · Intel(R) Reference Platforms Uefi Firmware

Published 2026-03-10 · Updated 2026-03-10 · CVE-2025-20005

Positive Technologies (AI Summary)

CVSS v4.0

5.6

Medium

Base vector

AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Intel(R) reference platforms UEFI firmware (affected versions not specified)

Description A flaw exists in some UEFI firmware for certain Intel(R) reference platforms that could allow a privilege escalation. An attacker with privileged user access and a high level of complexity could potentially manipulate data. This requires local access and does not need user interaction. The issue may impact system integrity, with potential confidentiality and availability impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2025-20005

Affected Products

Intel(R) Reference Platforms Uefi Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-20005 · Security Note
• https://t.me/CVEtracker/47042 · Telegram Post
• https://twitter.com/CVEnew/status/2031504058222075923 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01234.html · Note
• https://t.me/cveNotify/155006 · Telegram Post