Firmware Vulnerability Impacts Multiple Intel CPU Generations – Critical UEFI Code Execution Flaw Discovered in CPUs from 14th Gen Raptor Lake to 6th Gen Skylake, No Protection from TPM
Cybersecurity firm Eclypsium has uncovered significant security vulnerabilities in the Phoenix SecureCore UEFI firmware used by various Intel CPU and motherboard vendors across different generations. These vulnerabilities, dubbed “UEFIcanhazbufferoverflow,” are due to an insecure call to the UEFI service “GetVariable,” which could lead to a stack buffer overflow and allow malicious code execution. This kind … Read more