CVE-2014-4859

Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate…

published January 31, 2020

CVSS
—
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restrictions via crafted data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00587 · 47.1th percentile
Published
2020-01-31T15:08Z
EPSS history
Timeline
  • 31 JAN 15:08Z
    Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate…
    cvelistv5