Out-of-Bounds Read in Intel Slim Bootloader Affects System Availability

CVE-2026-28746

What is CVE-2026-28746?

An out-of-bounds read vulnerability exists in the AuthenticateComponent of the Intel Slim Bootloader, which may allow a local attacker with privileged user access to execute a denial of service attack. The attack could occur without the need for special internal knowledge or user interaction, using low complexity techniques. If exploited, this vulnerability has significant implications for the availability of the system, potentially disrupting operations without affecting confidentiality or integrity.

References