Improper Initialization in UEFI Firmware of Intel Platforms

CVE-2025-35991

What is CVE-2025-35991?

The vulnerability arises from improper initialization in the UEFI firmware on select Intel platforms, specifically within Ring 0: Bare Metal OS. This flaw may enable an unauthorized system software adversary with privileged access to exploit the vulnerability and potentially expose sensitive data. The attack does not require special internal knowledge and can progress through local access without any user interaction, posing a significant risk to data confidentiality of the affected systems.

References