CVE-2023-40550 MEDIUM

CVE-2023-40550: Shim: out-of-bound read in verify_buffer_sbat()

Weakness CWE-125
Published January 29, 2024
Last update January 27, 2026
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase.

Key dates

02Disclosure timeline

January 29, 2024 CVE published
January 27, 2026 Record updated