Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2024-29979

Unsafe Handling of Phoenix UEFI Variables

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: before 4.0.1.1012; SecureCore™ for Intel Coffee Lake: before 4.1.0.568; SecureCore™ for Intel Comet Lake: before 4.2.1.292; SecureCore™ for Intel Ice Lake: before 4.2.0.334.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phoenix SecureCore™ for Intel Kaby Lake

Default version status: affected

  • 0 to < 4.0.1.1012affected

Phoenix SecureCore™ for Intel Coffee Lake

Default version status: affected

  • 0 to < 4.1.0.568affected

Phoenix SecureCore™ for Intel Comet Lake

Default version status: affected

  • 0 to < 4.2.1.292affected

Phoenix SecureCore™ for Intel Ice Lake

Default version status: affected

  • 0 to < 4.2.0.334affected

References