Improper Input Validation in UEFI Firmware for Intel Processors
CVE-2023-34440

8.7HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Processors
Vendor
CVE Published:
12 February 2025

What is CVE-2023-34440?

A vulnerability has been identified in the UEFI firmware of certain Intel processors. This flaw arises from improper input validation, potentially allowing a privileged user with local access to escalate their privileges. The implications of this vulnerability highlight significant security challenges in managing firmware integrity, as it could lead to unauthorized control over system resources. Timely updates and security patches are essential for safeguarding against potential exploitation.

Affected Version(s)

Intel(R) Processors See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-34440 : Improper Input Validation in UEFI Firmware for Intel Processors