Riskcovery

CVE-2014-4860

State
Published
Severity
Not scored
Published
Jan 31, 2020
Updated
Aug 6, 2024
Reserved
Jul 10, 2014

Read the record on cve.org

Description

Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted data that is not properly handled during the coalescing phase.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SCT3Phoenix Technologies Ltd.
  • before 5/23/2014Affected
BIOSAmerican Megatrends Incorporated (AMI)
  • unknownAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.