CVE-2021-43614
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.
Risk Assessment
An attacker could exploit this vulnerability to cause denial of service or potentially execute code in firmware context, threatening system integrity.
Recommendation
Apply patches provided by the firmware vendor. Restrict access to UEFI variables to trusted entities only.
Other vulnerabilities in UEFI firmware
See all- CVE-2021-39301High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products, which may allow privilege escalation and arbitrary code execution.
- CVE-2021-39300High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
- CVE-2021-39299High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
- CVE-2021-39297High
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products, which may allow privilege escalation and arbitrary code execution.
Original NVD description (English source)
Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS