Potential NULL Pointer Dereference Vulnerability in Intel UEFI Firmware May Allow Escalation of Privilege

CVE-2023-23904

What is CVE-2023-23904?

A null pointer dereference vulnerability in UEFI firmware for certain Intel processors can potentially allow a privileged user to escalate privileges through local access. This issue arises from improper handling of null pointers, enabling local attackers to bypass security controls. It is crucial for users and organizations utilizing affected Intel UEFI firmware to apply available mitigations advised by Intel to protect their systems against potential exploitation.

References