CVE-2023-52080

IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT-GetVariable function. Attackers with access to local NVRAM variables can exploit this by modifying these variables on SPI Flash, resulting in memory data being tampered with. When critical...

PT-2024-14388 · Ieit · Ieit Nf5280M6 Uefi Firmware

Name of the Vulnerable Software and Affected Versions: IEIT NF5280M6 UEFI firmware versions through 8.4 Description: The issue is caused by improper use of the gRT-GetVariable function, leading to a pool overflow vulnerability. Attackers with access to local NVRAM variables can exploit this by...