CVE-2024-0762 | Phoenix SecureCore for Intel Kaby Lake UEFI Variable buffer overflow

A vulnerability classified as critical has been found in Phoenix SecureCore for Intel Kaby Lake, SecureCore for Intel Coffee Lake, SecureCore for Intel Ice Lake, SecureCore for Intel Comet Lake, SecureCore for Intel Tiger Lake, SecureCore for Intel Jasper Lake, SecureCore for Intel Alder Lake, SecureCore for Intel Raptor Lake and SecureCore for Intel Meteor Lake. Affected is an unknown function of the component UEFI Variable Handler. The manipulation leads to buffer overflow.

This vulnerability is traded as CVE-2024-0762. Local access is required to approach this attack. There is no exploit available.

It is recommended to upgrade the affected component.