CVE-2024-21859: Buffer Overflow
Published Feb 12, 2025
·Updated
Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
Affected Software
1 affected component
Intel Uefi Firmware
Event History
Feb 12, 2025
CVE Published
via MITRE·09:19 PM
Data Sourced
via MITRE·09:19 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-21859?
The severity of CVE-2024-21859 has not been officially rated, but it is considered significant due to the potential for information disclosure by privileged users.
2
How do I fix CVE-2024-21859?
To fix CVE-2024-21859, update your Intel UEFI firmware to the latest version provided by Intel that contains the patches for this vulnerability.
3
Who is affected by CVE-2024-21859?
CVE-2024-21859 affects systems utilizing specific Intel UEFI firmware, especially those with certain Intel processors.
4
What type of attack does CVE-2024-21859 allow?
CVE-2024-21859 could potentially allow a privileged user to conduct local information disclosure.
5
When was CVE-2024-21859 published?
CVE-2024-21859 was published on January 10, 2024.