CVE-2023-52080

IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT-GetVariable function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. When critical...

CVE-2023-52080

The IEIT NF5280M6 UEFI firmware (versions through 8.4 ) is vulnerable to a pool overflow caused by the improper use of the gRT->GetVariable() function. An attacker with access to local NVRAM variables can exploit this by modifying variables on the SPI Flash , leading to memory data tampering ....