Use After Free Vulnerability in Intel Aptio V UEFI Firmware Integrator Tools
CVE-2023-26589

6.5MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Aptio* V Uefi Firmware Integrator Tools
Vendor
CVE Published:
14 November 2023

What is CVE-2023-26589?

A use after free vulnerability in Intel's Aptio* V UEFI Firmware Integrator Tools allows an authenticated user, with local access, to potentially trigger a denial of service. This flaw could be exploited by attackers to destabilize system operations, underscoring the importance of applying the latest security updates provided by Intel to mitigate potential risks.

Affected Version(s)

Intel(R) Aptio* V UEFI Firmware Integrator Tools See references

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.