CVE-2014-4860

Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically…

published January 31, 2020

CVSS
—
EPSS
1%
Percentile
41.9
In the wild
Unconfirmed
What it is

Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted data that is not properly handled during the coalescing phase.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00504 · 41.9th percentile
Published
2020-01-31T15:08Z
EPSS history
Timeline
  • 31 JAN 15:08Z
    Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically…
    cvelistv5