Intel R Slim Bootloader May Allow An Information Disclosure System Software Adversary With An Authenticated User Combined With A Low Complexity Attack May Enable Denial Of Service This Result May Potentially Occur Via Local Access When Attack Requirements Are Not Present Without Special Internal Knowledge And Requires Active User Interaction The Potential Vulnerability May Impact The Confidentiality Low Integrity None And Availability Low Of The Vulnerable System Resulting In Subsequent System Confidentiality Low Integrity None And Availability Low Impacts
Monthly
Integer overflow in Intel Slim Bootloader UEFI firmware exposes systems to limited information disclosure and denial of service. Exploitation requires local, authenticated access with active user interaction, yielding only low-impact confidentiality and availability consequences with no integrity impact. No active exploitation has been identified; the CVSS 4.0 score of 2.4 reflects the constrained exploitation conditions and limited blast radius.
Integer overflow in Intel Slim Bootloader UEFI firmware exposes systems to limited information disclosure and denial of service. Exploitation requires local, authenticated access with active user interaction, yielding only low-impact confidentiality and availability consequences with no integrity impact. No active exploitation has been identified; the CVSS 4.0 score of 2.4 reflects the constrained exploitation conditions and limited blast radius.