Integer Overflow Vulnerability in Intel Slim Bootloader Firmware
CVE-2026-28729
Key Information:
- Vendor
Intel
- Vendor
- CVE Published:
- 11 August 2026
What is CVE-2026-28729?
An integer overflow vulnerability in the UEFI firmware for Intel's Slim Bootloader could result in information disclosure under certain conditions. An authenticated user exploiting this vulnerability may perform a low complexity attack that could lead to denial of service. While such attacks would typically require local access and active user interaction, the implications may compromise system confidentiality and availability. Users are urged to review their systems for potential exposure and take appropriate mitigative actions.
Affected Version(s)
Intel(R) Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (none) and availability (low) impacts. See references