Information Disclosure Vulnerability in Intel UEFI DXE Module

CVE-2025-20073

What is CVE-2025-20073?

The improper buffer restrictions in the UEFI DXE module for certain Intel Reference Platforms may expose sensitive information. This vulnerability enables a system software adversary with restricted local access to potentially exploit the flaw, leading to unauthorized data exposure. While the attack complexity is considered high and requires internal knowledge, it does not necessitate user interaction, making it a critical issue for system confidentiality. Organizations using affected Intel Reference Platforms should evaluate their security posture and apply necessary mitigations to safeguard their systems.

References