Security Advisory

CVE-2014-4859

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-31 15:08:20
Last updated 2024-08-06 11:27:36
Assigner certcc
CVSS score not scored
State PUBLISHED

Description

Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restrictions via crafted data.