CVE-2024-0762: Potential buffer overflow when handling UEFI variables
Published May 14, 2024
·Updated
Potential buffer overflow in unsafe UEFI variable handling
in Phoenix SecureCore™ for select Intel platforms
This issue affects:
Phoenix
SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998;
Phoenix
SecureCore™ for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562;
Phoenix
SecureCore™ for Intel Ice Lake: from 4.2.0.1 before 4.2.0.323;
Phoenix
SecureCore™ for Intel Comet Lake: from 4.2.1.1 before 4.2.1.287;
Phoenix
SecureCore™ for Intel Tiger Lake: from 4.3.0.1 before 4.3.0.236;
Phoenix
SecureCore™ for Intel Jasper Lake: from 4.3.1.1 before 4.3.1.184;
Phoenix
SecureCore™ for Intel Alder Lake: from 4.4.0.1 before 4.4.0.269;
Phoenix
SecureCore™ for Intel Raptor Lake: from 4.5.0.1 before 4.5.0.218;
Phoenix
SecureCore™ for Intel Meteor Lake: from 4.5.1.1 before 4.5.1.15.
Affected Software
598 affected components
Phoenix SecureCore>4.0.1.1, <4.0.1.998
Phoenix SecureCore>4.1.0.1, <4.1.0.562
Phoenix SecureCore>4.2.0.1, <4.2.0.323
Phoenix SecureCore>4.2.1.1, <4.2.1.287
Phoenix SecureCore>4.3.0.1, <4.3.0.236
Phoenix SecureCore>4.3.1.1, <4.3.1.184
Phoenix SecureCore>4.4.0.1, <4.4.0.269
Phoenix SecureCore>4.5.0.1, <4.5.0.218
Phoenix SecureCore>4.5.1.1, <4.5.1.15
All of the following
Phoenixtech Securecore Technology>=4.0.1.1<4.0.1.998
Any of the following
Intel Celeron 3865u
Intel Celeron 3867u
Intel Celeron 3965u
Intel Celeron 3965y
Intel Celeron G3930
Intel Celeron G3930t
Intel Celeron G3950
Intel Core I3-7020u
Intel Core I3-7100
Intel Core I3-7100h
Intel Core I3-7100t
Intel Core I3-7100u
Intel Core I3-7101e
Intel Core I3-7101te
Intel Core I3-7130u
Intel Core I3-7167u
Intel Core I3-7300
Intel Core I3-7300t
Intel Core I3-7320
Intel Core I3-7350k
Intel Core I3-8130u
Intel Core I5-7200u
Intel Core I5-7260u
Intel Core I5-7267u
Intel Core I5-7287u
Intel Core I5-7300hq
Intel Core I5-7300u
Intel Core I5-7360u
Intel Core I5-7400
Intel Core I5-7400t
Intel Core I5-7440hq
Intel Core I5-7500
Intel Core I5-7500t
Intel Core I5-7600
Intel Core I5-7600k
Intel Core I5-7600t
Intel Core I5-7640x
Intel Core I5-7y54
Intel Core I5-7y57
Intel Core I5-8250u
Intel Core I5-8305g
Intel Core I5-8350u
Intel Core I7-7500u
Intel Core I7-7560u
Intel Core I7-7567u
Intel Core I7-7600u
Intel Core I7-7660u
Intel Core I7-7700
Intel Core I7-7700hq
Intel Core I7-7700k
Intel Core I7-7700t
Intel Core I7-7740x
Intel Core I7-7820hk
Intel Core I7-7820hq
Intel Core I7-7920hq
Intel Core I7-7y75
Intel Core I7-8500y
Intel Core I7-8550u
Intel Core I7-8650u
Intel Core I7-8705g
Intel Core I7-8706g
Intel Core I7-8709g
Intel Core I7-8809g
Intel Core M3-7y30
Intel Core M3-7y32
Intel Pentium Gold 4410y
Intel Pentium Gold 4415u
Intel Pentium Gold 4415y
Intel Pentium Gold 4417u
Intel Pentium Gold G4600
Intel Pentium Gold G4600t
Intel Pentium Gold G4620
Intel Xeon E3-1220
Intel Xeon E3-1225
Intel Xeon E3-1230
Intel Xeon E3-1240
Intel Xeon E3-1245
Intel Xeon E3-1270
Intel Xeon E3-1275
Intel Xeon E3-1280
Intel Xeon E3-1285
Intel Xeon E3-1505l
Intel Xeon E3-1505m
Intel Xeon E3-1535m
All of the following
Phoenixtech Securecore Technology>=4.1.0.1<4.1.0.562
Any of the following
Intel Celeron G4900
Intel Celeron G4900t
Intel Celeron G4920
Intel Celeron G4930
Intel Celeron G4930t
Intel Celeron G4950
Intel Core I3-8100
Intel Core I3-8100b
Intel Core I3-8100f
Intel Core I3-8100h
Intel Core I3-8100t
Intel Core I3-8109u
Intel Core I3-8300
Intel Core I3-8300t
Intel Core I3-8350k
Intel Core I3-9100
Intel Core I3-9100f
Intel Core I3-9100t
Intel Core I3-9300
Intel Core I3-9300t
Intel Core I3-9320
Intel Core I3-9350k
Intel Core I3-9350kf
Intel Core I5-8257u
Intel Core I5-8259u
Intel Core I5-8260u
Intel Core I5-8269u
Intel Core I5-8279u
Intel Core I5-8300h
Intel Core I5-8400
Intel Core I5-8400b
Intel Core I5-8400h
Intel Core I5-8400t
Intel Core I5-8500
Intel Core I5-8500b
Intel Core I5-8500t
Intel Core I5-8600
Intel Core I5-8600k
Intel Core I5-8600t
Intel Core I5-9300h
Intel Core I5-9300hf
Intel Core I5-9400
Intel Core I5-9400f
Intel Core I5-9400h
Intel Core I5-9400t
Intel Core I5-9500
Intel Core I5-9500f
Intel Core I5-9500t
Intel Core I5-9600
Intel Core I5-9600k
Intel Core I5-9600kf
Intel Core I5-9600t
Intel Core I7-8086k
Intel Core I7-8557u
Intel Core I7-8559u
Intel Core I7-8569u
Intel Core I7-8700
Intel Core I7-8700b
Intel Core I7-8700k
Intel Core I7-8700t
Intel Core I7-8750h
Intel Core I7-8850h
Intel Core I7-9700
Intel Core I7-9700f
Intel Core I7-9700k
Intel Core I7-9700kf
Intel Core I7-9700t
Intel Core I7-9750h
Intel Core I7-9750hf
Intel Core I7-9850h
Intel Core I9-8950hk
Intel Core I9-9880h
Intel Core I9-9900
Intel Core I9-9900k
Intel Core I9-9900kf
Intel Core I9-9900ks
Intel Core I9-9900t
Intel Core I9-9980hk
Intel Pentium Gold G5400
Intel Pentium Gold G5400t
Intel Pentium Gold G5420
Intel Pentium Gold G5420t
Intel Pentium Gold G5500
Intel Pentium Gold G5500t
Intel Pentium Gold G5600
Intel Pentium Gold G5600t
Intel Pentium Gold G5620
Intel Xeon E-2104g
Intel Xeon E-2124
Intel Xeon E-2124g
Intel Xeon E-2126g
Intel Xeon E-2134
Intel Xeon E-2136
Intel Xeon E-2144g
Intel Xeon E-2146g
Intel Xeon E-2174g
Intel Xeon E-2176g
Intel Xeon E-2176m
Intel Xeon E-2186g
Intel Xeon E-2186m
Intel Xeon E-2224
Intel Xeon E-2224g
Intel Xeon E-2226g
Intel Xeon E-2234
Intel Xeon E-2236
Intel Xeon E-2244g
Intel Xeon E-2246g
Intel Xeon E-2274g
Intel Xeon E-2276g
Intel Xeon E-2276m
Intel Xeon E-2278g
Intel Xeon E-2286g
Intel Xeon E-2286m
Intel Xeon E-2288g
All of the following
Phoenixtech Securecore Technology>=4.2.0.1<4.2.0.323
Any of the following
Intel Core I3-1000g1
Intel Core I3-1000g4
Intel Core I3-1000ng4
Intel Core I3-1005g1
Intel Core I5-1030g4
Intel Core I5-1030g7
Intel Core I5-1030ng7
Intel Core I5-1035g1
Intel Core I5-1035g4
Intel Core I5-1035g7
Intel Core I5-1038ng7
Intel Core I7-1060g7
Intel Core I7-1060ng7
Intel Core I7-1065g7
Intel Core I7-1068ng7
Intel Pentium 6805
Intel Xeon Gold 5315y
Intel Xeon Gold 5317
Intel Xeon Gold 5318n
Intel Xeon Gold 5318s
Intel Xeon Gold 5318y
Intel Xeon Gold 5320
Intel Xeon Gold 5320t
Intel Xeon Gold 6312u
Intel Xeon Gold 6314u
Intel Xeon Gold 6326
Intel Xeon Gold 6330
Intel Xeon Gold 6330n
Intel Xeon Gold 6334
Intel Xeon Gold 6336y
Intel Xeon Gold 6338
Intel Xeon Gold 6338n
Intel Xeon Gold 6338t
Intel Xeon Gold 6342
Intel Xeon Gold 6346
Intel Xeon Gold 6348
Intel Xeon Gold 6354
Intel Xeon Platinum 8351n
Intel Xeon Platinum 8352s
Intel Xeon Platinum 8352v
Intel Xeon Platinum 8352y
Intel Xeon Platinum 8358
Intel Xeon Platinum 8358p
Intel Xeon Platinum 8360y
Intel Xeon Platinum 8362
Intel Xeon Platinum 8368
Intel Xeon Platinum 8368q
Intel Xeon Platinum 8380
Intel Xeon Silver 4309y
Intel Xeon Silver 4310
Intel Xeon Silver 4310t
Intel Xeon Silver 4314
Intel Xeon Silver 4316
Intel Xeon W-3323
Intel Xeon W-3335
Intel Xeon W-3345
Intel Xeon W-3365
Intel Xeon W-3375
All of the following
Phoenixtech Securecore Technology>=4.2.1.1<4.2.1.287
Any of the following
Intel Celeron G5900
Intel Celeron G5900t
Intel Celeron G5905
Intel Celeron G5905t
Intel Celeron G5920
Intel Celeron G5925
Intel Core I3-10105
Intel Core I3-10105f
Intel Core I3-10105t
Intel Core I3-10110u
Intel Core I3-10305
Intel Core I3-10305t
Intel Core I3-10325
Intel Core I5-10200h
Intel Core I5-10210u
Intel Core I5-10300h
Intel Core I5-10310u
Intel Core I5-10400h
Intel Core I5-10500h
Intel Core I5-10505
Intel Core I7-10510u
Intel Core I7-10610u
Intel Core I7-10710u
Intel Core I7-10750h
Intel Core I7-10810u
Intel Core I7-10850h
Intel Core I7-10870h
Intel Core I7-10875h
Intel Core I9-10885h
Intel Core I9-10980hk
Intel Pentium 6405u
Intel Pentium Gold G6405
Intel Pentium Gold G6405t
Intel Pentium Gold G6505
Intel Pentium Gold G6505t
Intel Pentium Gold G6605
Intel Xeon W-10855m
Intel Xeon W-10885m
Intel Xeon W-1250
Intel Xeon W-1250p
Intel Xeon W-1270
Intel Xeon W-1270p
Intel Xeon W-1290
Intel Xeon W-1290p
Intel Xeon W-1290t
All of the following
Phoenixtech Securecore Technology>=4.3.0.1<4.3.0.236
Any of the following
Intel Celeron 6305
Intel Celeron 6305e
Intel Core I3-11100b
Intel Core I3-1110g4
Intel Core I3-1115g4
Intel Core I3-1115g4e
Intel Core I3-1115gre
Intel Core I3-1125g4
Intel Core I5-11300h
Intel Core I5-1130g7
Intel Core I5-11320h
Intel Core I5-1135g7
Intel Core I5-1140g7
Intel Core I5-1145g7
Intel Core I5-1145g7e
Intel Core I5-1145gre
Intel Core I5-11500b
Intel Core I5-11500h
Intel Core I5-1155g7
Intel Core I7-11370h
Intel Core I7-11375h
Intel Core I7-11390h
Intel Core I7-11600h
Intel Core I7-1160g7
Intel Core I7-1165g7
Intel Core I7-11700b
Intel Core I7-11800h
Intel Core I7-1180g7
Intel Core I7-11850h
Intel Core I7-1185g7
Intel Core I7-1185g7e
Intel Core I7-1185gre
Intel Core I7-1195g7
Intel Core I9-11900h
Intel Core I9-11900kb
Intel Core I9-11950h
Intel Core I9-11980hk
Intel Pentium Gold 7505
Intel Xeon 11855m
Intel Xeon 11955m
All of the following
Phoenixtech Securecore Technology>=4.3.1.1<4.3.1.184
Any of the following
Intel Celeron N4500
Intel Celeron N4505
Intel Celeron N5095
Intel Celeron N5100
Intel Celeron N5105
Intel Pentium Silver N6000
Intel Pentium Silver N6005
All of the following
Phoenixtech Securecore Technology>=4.4.0.1<4.4.0.269
Any of the following
Intel Atom X7211e
Intel Atom X7213e
Intel Atom X7425e
Intel Celeron 7300
Intel Celeron 7305
Intel Celeron 7305l
Intel Celeron G6900
Intel Celeron G6900t
Intel Core 3-n350
Intel Core 3-n355
Intel Core I3-12100
Intel Core I3-12100f
Intel Core I3-12100t
Intel Core I3-1210u
Intel Core I3-1215u
Intel Core I3-1215ul
Intel Core I3-1220p
Intel Core I3-12300
Intel Core I3-12300hl
Intel Core I3-12300t
Intel Core I3-n300
Intel Core I3-n305
Intel Core I5-1230u
Intel Core I5-1235u
Intel Core I5-1235ul
Intel Core I5-12400
Intel Core I5-12400f
Intel Core I5-12400t
Intel Core I5-1240p
Intel Core I5-1240u
Intel Core I5-12450h
Intel Core I5-12450hx
Intel Core I5-1245u
Intel Core I5-1245ul
Intel Core I5-12490f
Intel Core I5-12500
Intel Core I5-12500h
Intel Core I5-12500hl
Intel Core I5-12500t
Intel Core I5-1250p
Intel Core I5-12600
Intel Core I5-12600h
Intel Core I5-12600hl
Intel Core I5-12600hx
Intel Core I5-12600k
Intel Core I5-12600kf
Intel Core I5-12600t
Intel Core I7-1250u
Intel Core I7-1255u
Intel Core I7-1255ul
Intel Core I7-1260p
Intel Core I7-1260u
Intel Core I7-12650h
Intel Core I7-12650hx
Intel Core I7-1265u
Intel Core I7-1265ul
Intel Core I7-12700
Intel Core I7-12700f
Intel Core I7-12700h
Intel Core I7-12700hl
Intel Core I7-12700k
Intel Core I7-12700kf
Intel Core I7-12700t
Intel Core I7-1270p
Intel Core I7-12800h
Intel Core I7-12800hl
Intel Core I7-12800hx
Intel Core I7-1280p
Intel Core I7-12850hx
Intel Core I9-12900
Intel Core I9-12900f
Intel Core I9-12900h
Intel Core I9-12900hk
Intel Core I9-12900hx
Intel Core I9-12900k
Intel Core I9-12900kf
Intel Core I9-12900ks
Intel Core I9-12900t
Intel Core I9-12950hx
Intel N100
Intel N150
Intel N200
Intel N250
Intel N50
Intel N95
Intel N97
Intel Pentium 8500
Intel Pentium 8505
Intel Pentium Gold G7400
Intel Pentium Gold G7400t
All of the following
Phoenixtech Securecore Technology>=4.5.0.1<4.5.0.218
Any of the following
Intel 300
Intel 300t
Intel Core 3-100u
Intel Core 5-120u
Intel Core 5-210h
Intel Core 5-220h
Intel Core 5-220u
Intel Core 7-150u
Intel Core 7-240h
Intel Core 7-250h
Intel Core 7-250u
Intel Core 9-270h
Intel Core I3-1305u
Intel Core I3-13100
Intel Core I3-13100f
Intel Core I3-13100t
Intel Core I3-1315u
Intel Core I3-14100
Intel Core I3-14100f
Intel Core I3-14100t
Intel Core I5-1334u
Intel Core I5-1335u
Intel Core I5-13400
Intel Core I5-13400f
Intel Core I5-13400t
Intel Core I5-1340p
Intel Core I5-13420h
Intel Core I5-13450hx
Intel Core I5-1345u
Intel Core I5-13490f
Intel Core I5-13500
Intel Core I5-13500h
Intel Core I5-13500hx
Intel Core I5-13500t
Intel Core I5-13505h
Intel Core I5-1350p
Intel Core I5-13600
Intel Core I5-13600h
Intel Core I5-13600hx
Intel Core I5-13600k
Intel Core I5-13600kf
Intel Core I5-13600t
Intel Core I5-14400
Intel Core I5-14400f
Intel Core I5-14400t
Intel Core I5-14401e
Intel Core I5-14401te
Intel Core I5-14450hx
Intel Core I5-14490f
Intel Core I5-14500
Intel Core I5-14500hx
Intel Core I5-14500t
Intel Core I5-14501e
Intel Core I5-14501te
Intel Core I5-14600
Intel Core I5-14600k
Intel Core I5-14600kf
Intel Core I5-14600t
Intel Core I7-1355u
Intel Core I7-1360p
Intel Core I7-13620h
Intel Core I7-13650hx
Intel Core I7-1365u
Intel Core I7-13700
Intel Core I7-13700e
Intel Core I7-13700f
Intel Core I7-13700h
Intel Core I7-13700hx
Intel Core I7-13700k
Intel Core I7-13700kf
Intel Core I7-13700t
Intel Core I7-13700te
Intel Core I7-13705h
Intel Core I7-1370p
Intel Core I7-13790f
Intel Core I7-13800h
Intel Core I7-13850hx
Intel Core I7-14650hx
Intel Core I7-14700
Intel Core I7-14700f
Intel Core I7-14700hx
Intel Core I7-14700k
Intel Core I7-14700kf
Intel Core I7-14700t
Intel Core I7-14701e
Intel Core I7-14701te
Intel Core I7-14790f
Intel Core I9-13900
Intel Core I9-13900e
Intel Core I9-13900f
Intel Core I9-13900h
Intel Core I9-13900hk
Intel Core I9-13900hx
Intel Core I9-13900k
Intel Core I9-13900kf
Intel Core I9-13900ks
Intel Core I9-13900t
Intel Core I9-13900te
Intel Core I9-13905h
Intel Core I9-13950hx
Intel Core I9-13980hx
Intel Core I9-14900
Intel Core I9-14900f
Intel Core I9-14900hx
Intel Core I9-14900k
Intel Core I9-14900kf
Intel Core I9-14900ks
Intel Core I9-14900t
Intel Core I9-14901e
Intel Core I9-14901ke
Intel Core I9-14901te
Intel U300
Intel Xeon E-2414
Intel Xeon E-2434
Intel Xeon E-2436
Intel Xeon E-2456
Intel Xeon E-2468
Intel Xeon E-2478
Intel Xeon E-2486
Intel Xeon E-2488
All of the following
Phoenixtech Securecore Technology>=4.5.1.1<4.5.1.15
Any of the following
Intel Core M3-6y30
Intel Core Ultra 3 105ul
Intel Core Ultra 5 115u
Intel Core Ultra 5 125h
Intel Core Ultra 5 125hl
Intel Core Ultra 5 125u
Intel Core Ultra 5 125ul
Intel Core Ultra 5 134u
Intel Core Ultra 5 135h
Intel Core Ultra 5 135hl
Intel Core Ultra 5 135u
Intel Core Ultra 5 135ul
Intel Core Ultra 7 155h
Intel Core Ultra 7 155hl
Intel Core Ultra 7 155u
Intel Core Ultra 7 155ul
Intel Core Ultra 7 164u
Intel Core Ultra 7 165h
Intel Core Ultra 7 165hl
Intel Core Ultra 7 165u
Intel Core Ultra 7 165ul
Intel Core Ultra 9 185h
Event History
May 14, 2024
CVE Published
via MITRE·02:56 PM
Data Sourced
via MITRE·02:56 PM
DescriptionSeverity
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 20, 2024
News Published
via BleepingComputer·09:31 PM
News Published
via BleepingComputer·09:32 PM
Jun 21, 2024
News Published
via The Register·04:27 PM
News Published
via The Register·04:30 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-0762?
CVE-2024-0762 is classified as a potential buffer overflow vulnerability that could have significant security implications.
2
How do I fix CVE-2024-0762?
To remediate CVE-2024-0762, it is advised to update the Phoenix SecureCore firmware to the latest version that addresses this vulnerability.
3
Which systems are affected by CVE-2024-0762?
CVE-2024-0762 affects select Intel platforms running Phoenix SecureCore firmware, specifically models using Intel Kaby Lake and Coffee Lake chipsets.
4
What are the risks associated with CVE-2024-0762?
The risks associated with CVE-2024-0762 include potential unauthorized access, system instability, and risk of malware exploitation.
5
Has CVE-2024-0762 been publicly disclosed?
Yes, CVE-2024-0762 has been publicly disclosed and is being actively monitored by the cybersecurity community.