CVE-2025-3052

🐞 CVE-2025-3052: IhisiParamBuffer 메모리 손상 이 저장소는 Microsoft의 타사 인증서로 서명된 UEFI 모듈의 메모리 손상 취약점인 CVE-2025-3052와 관련된 연구 자료를 중앙 집중화한 것입니다. 이 취약점을 통해 공격자는 보안에 중요한 펌웨어 구조를 손상시키고, Secure Boot 시행을 무력화하며, 운영 체제가 로드되기 전에 임의의 서명되지 않은 코드를 실행할 수 있습니다. 여기에는 근본 원인과 익스플로잇 기법에 대한 기술 분석, 실제 환경 및 교육용 취약 바이너리, 그리고 연구자들...

CVE-2025-3052 — Updated!

🐞 CVE-2025-3052: IhisiParamBuffer Memory Corruption This repository centralizes research material related to CVE-2025-3052, a memory corruption vulnerability in a UEFI module signed with Microsoft's third-party certificate that allows an attacker to corrupt security-critical firmware structures,...

CVE-2025-20064

Improper input validation in the UEFI FlashUcAcmSmm module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local...

CVE-2025-20064

Improper input validation in the UEFI FlashUcAcmSmm module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local...

PT-2026-24498

Name of the Vulnerable Software and Affected Versions UEFI PdaSmm module affected versions not specified Description A time-of-check time-of-use race condition exists in the UEFI PdaSmm module on certain Intel reference platforms, potentially leading to information disclosure. A system software...

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...

Vulnerability of the iwl_uefi_reduce_powerSection() function in the drivers/net/wireless/intel/iwlwifi/fw/uefi.c module – A driver for supporting Intel wireless connection adapters in Linux operating systems, which allows a hacker to cause a service failure

Vulnerability of the iwluefireducepowerSection function in the drivers/net/wireless/intel/iwlwifi/fw/uefi.c module – The driver for Intel wireless connection adapters in Linux operating systems is vulnerable to errors in its code. Exploiting this vulnerability could allow an attacker to cause a...