CVE-2019-14557

Published: Oct 5, 2020Modified: Nov 21, 2024

8.0

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable elevation of privilege or denial of service via adjacent access.

Affected (1)

Products: Intel: Bios

Intel

1 product

Bios

Configuration A

1 vulnerable · 54 platform

Vulnerable Software	Affected Versions
Intel Bios	All versions

Running on/with	Platform Versions
Intel Celeron 4205u	All versions
Intel Celeron 4305u	All versions
Intel Celeron 4305ue	All versions
Intel Celeron 5205u	All versions
Intel Celeron 5305u	All versions
Intel Core I3 8100	All versions
Intel Core I3 8100f	All versions
Intel Core I3 8100t	All versions
Intel Core I3 8300	All versions
Intel Core I3 8300t	All versions
Intel Core I3 8350k	All versions
Intel Core I3 9100	All versions
Intel Core I3 9100f	All versions
Intel Core I3 9100t	All versions
Intel Core I3 9300	All versions
Intel Core I3 9300t	All versions
Intel Core I3 9320	All versions
Intel Core I3 9350k	All versions
Intel Core I3 9350kf	All versions
Intel Core I5 8400	All versions
Intel Core I5 8400t	All versions
Intel Core I5 8500	All versions
Intel Core I5 8500t	All versions
Intel Core I5 8600	All versions
Intel Core I5 8600k	All versions
Intel Core I5 8600t	All versions
Intel Core I5 9400	All versions
Intel Core I5 9400f	All versions
Intel Core I5 9400t	All versions
Intel Core I5 9500	All versions
Intel Core I5 9500f	All versions
Intel Core I5 9500t	All versions
Intel Core I5 9600	All versions
Intel Core I5 9600k	All versions
Intel Core I5 9600kf	All versions
Intel Core I5 9600t	All versions
Intel Core I7 1060g7	All versions
Intel Core I7 1060ng7	All versions
Intel Core I7 1065g7	All versions
Intel Core I7 1068ng7	All versions
Intel Core I7 8086k	All versions
Intel Core I7 8700	All versions
Intel Core I7 8700k	All versions
Intel Core I7 8700t	All versions
Intel Core I7 9700	All versions
Intel Core I7 9700f	All versions
Intel Core I7 9700k	All versions
Intel Core I7 9700kf	All versions
Intel Core I7 9700t	All versions
Intel Core I9 9900	All versions
Intel Core I9 9900k	All versions
Intel Core I9 9900kf	All versions
Intel Core I9 9900ks	All versions
Intel Core I9 9900t	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.