CVE-2025-3052

CVE-2025-3052 is an arbitrary write vulnerability in a UEFI module signed with a Microsoft third-party certificate (specifically the Microsoft Corporation UEFI CA 2011). The root cause is the unsafe handling of data retrieved from the IhisiParamBuffer NVRAM variable without proper validation, all...

CVE-2025-3052: Undefined Security Weakness

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability...