Stack-Based Buffer Overflow in UEFI Firmware of Intel Slim Bootloader

CVE-2026-35500

What is CVE-2026-35500?

The Intel Slim Bootloader contains a stack-based buffer overflow vulnerability in its UEFI firmware, which operates at Ring 0. An unauthenticated attacker with physical access can exploit this flaw to escalate privileges without requiring user interaction. This can lead to unauthorized control over system resources and compromise the confidentiality, integrity, and availability of the affected system. The attack can be conducted with low complexity, making it particularly concerning for environments where physical security measures may be lax.

References