What the vulnerability does
01Description
Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS base score
4.3/10
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Key dates
02Disclosure timeline
August 14, 2024
CVE published
November 3, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2022-20684 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability
CVE-2020-25675
CVE-2026-43907 OpenImageIO: Integer overflow in QueryRGBBufferSizeInternal leads to heap out-of-bounds write in DPX decoder (kCbYCr and kABGR)
CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
CVE-2024-21825
