CVEvulnerability

CVE-2024-1598

7.8 HIGH Published 2024-05-14 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2024-05-14
Last modified: 2026-06-17
Assigner: 22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de
CVSS 3.1 (22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de): 7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-121

Description

Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects: SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.

Affected configurations

• phoenixtech securecore technology (>= 4.1.0.1 < 4.1.0.567)

Weakness · CWE (1)

CWE-121 Stack-based Buffer Overflow weakness

References

https://phoenixtech.com/phoenix-security-notifications/cve-2024-1598/ Vendor Advisory
https://www.phoenix.com/security-notifications/cve-2024-1598/ Not Applicable

CVE-2024-1598

Description

Affected configurations

Related

Weakness · CWE (1)

References