Out-of-Bounds Read Vulnerability in Intel Server Boards
CVE-2026-55716

5.6MEDIUM

What is CVE-2026-55716?

This vulnerability involves an out-of-bounds read in the CheckUefiVgaMode function, present in the Intel Server Board D50DNP and M50FCP systems operating within Ring 0 UEFI. An attacker with local access and elevated privileges could exploit this vulnerability to access sensitive information under specific conditions, potentially allowing data exposure without requiring user interaction. The exploit scenario necessitates a sophisticated approach by the attacker, making it a concern for organizations reliant on these Intel server boards.

Affected Version(s)

Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP See references

References

CVSS V4

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.