Improper Input Validation in Intel UEFI Firmware Leading to Potential Information Disclosure or Denial of Service
CVE-2024-21781
7HIGH
Key Information:
- Vendor
Intel
- Vendor
- CVE Published:
- 16 September 2024
What is CVE-2024-21781?
An improper input validation issue exists in UEFI firmware for certain Intel processors. This vulnerability may allow a privileged user to exploit the flaw through local access, potentially enabling information disclosure or denial of service, which can compromise the affected system’s integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
UEFI firmware for some Intel(R) Processors See references
References
CVSS V4
Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published