CVE-2026-25194: Low severity Intel Intel(R) Slim Bootloader vulnerability
Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25194?
The severity of CVE-2026-25194 is assessed as 12.
How do I fix CVE-2026-25194?
To fix CVE-2026-25194, ensure that you update the firmware of the Intel(R) Slim Bootloader to the latest version provided by Intel.
What type of vulnerabilities does CVE-2026-25194 present?
CVE-2026-25194 presents an out-of-bounds write vulnerability leading to potential denial of service.
Who is affected by CVE-2026-25194?
CVE-2026-25194 affects systems running the Intel(R) Slim Bootloader and may be exploited by a privileged user with local access.
What could be the consequences of exploiting CVE-2026-25194?
Exploiting CVE-2026-25194 could lead to a denial of service on affected systems.