Security Advisory

CVE-2014-4860

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-31 15:08:16

Last updated 2024-08-06 11:27:36

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted data that is not properly handled during the coalescing phase.

← Browse all CVEs View on cve.org ↗