CVE-2024-1598: Potential buffer overflow when handling UEFI variables
Published May 14, 2024
·Updated
Potential buffer overflow in unsafe UEFI variable handling
in Phoenix SecureCore™ for Intel Gemini Lake.This issue affects:
SecureCore™ for Intel Gemini Lake: from 4.1.0.1 before 4.1.0.567.
Affected Software
3 affected components
Phoenix SecureCore for Intel Gemini Lake>=4.1.0.1<4.1.0.567
All of the following
Phoenixtech Securecore Technology>=4.1.0.1<4.1.0.567
Intel Celeron N4020
Event History
May 14, 2024
CVE Published
via MITRE·02:56 PM
Data Sourced
via MITRE·02:56 PM
DescriptionSeverity
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-1598?
CVE-2024-1598 has a critical severity due to the potential for buffer overflow vulnerabilities.
2
How do I fix CVE-2024-1598?
To fix CVE-2024-1598, update the Phoenix SecureCore™ to a version 4.1.0.567 or later.
3
What versions of SecureCore are affected by CVE-2024-1598?
CVE-2024-1598 affects Phoenix SecureCore™ versions from 4.1.0.1 up to but not including 4.1.0.567.
4
What product does CVE-2024-1598 pertain to?
CVE-2024-1598 pertains to the Phoenix SecureCore™ for Intel Gemini Lake.
5
Is CVE-2024-1598 specific to any hardware?
Yes, CVE-2024-1598 is specifically related to the Intel Gemini Lake hardware.