Null Pointer Dereference in Intel AMT and Standard Manageability Firmware
CVE-2025-20080

8.2HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Amt And Intel(r) Standard Manageability
Vendor
CVE Published:
10 February 2026

What is CVE-2025-20080?

A null pointer dereference vulnerability in the firmware for Intel AMT and Intel Standard Manageability could lead to potential denial of service. The issue may be exploited by a network adversary without authentication, leveraging a complex attack vector to disrupt system availability. The attack can occur via network access with no special internal knowledge required, demonstrating significant risks to system functionality, despite not affecting confidentiality or integrity.

Affected Version(s)

Intel(R) AMT and Intel(R) Standard Manageability See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.