Skip to content
OpenAdvisories
High · 7.5 Public exploit CVE-2024-0762 EUVD-2024-16550GHSA-cjqq-r96c-pwrf

Potential buffer overflow when handling UEFI variables

Published May 14, 2024 · Updated Jul 28, 2025 · Assigned by Phoenix

Vendor: Phoenix Product: SecureCore™ for Intel Alder Lake Product: SecureCore™ for Intel Coffee Lake Product: SecureCore™ for Intel Comet Lake Product: SecureCore™ for Intel Ice Lake Product: SecureCore™ for Intel Jasper Lake Product: SecureCore™ for Intel Kaby Lake Product: SecureCore™ for Intel Meteor Lake Product: SecureCore™ for Intel Raptor Lake Product: SecureCore™ for Intel Tiger Lake

Description

Potential buffer overflow
in unsafe UEFI variable handling

in Phoenix SecureCore™ for select Intel platforms

This issue affects:

Phoenix

SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998;

Phoenix

SecureCore™ for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562;

Phoenix

SecureCore™ for Intel Ice Lake: from 4.2.0.1 before 4.2.0.323;

Phoenix

SecureCore™ for Intel Comet Lake: from 4.2.1.1 before 4.2.1.287;

Phoenix

SecureCore™ for Intel Tiger Lake: from 4.3.0.1 before 4.3.0.236;

Phoenix

SecureCore™ for Intel Jasper Lake: from 4.3.1.1 before 4.3.1.184;

Phoenix

SecureCore™ for Intel Alder Lake: from 4.4.0.1 before 4.4.0.269;

Phoenix

SecureCore™ for Intel Raptor Lake: from 4.5.0.1 before 4.5.0.218;

Phoenix

SecureCore™ for Intel Meteor Lake: from 4.5.1.1 before 4.5.1.15.

Affected products

VendorProductAffectedFixed
Phoenix SecureCore™ for Intel Kaby Lake 4.0.1.1 – < 4.0.1.998 4.0.1.998
Phoenix SecureCore™ for Intel Coffee Lake 4.1.0.1 – < 4.1.0.562 4.1.0.562
Phoenix SecureCore™ for Intel Ice Lake 4.2.0.1 – < 4.2.0.323 4.2.0.323
Phoenix SecureCore™ for Intel Comet Lake 4.2.1.1 – < 4.2.1.287 4.2.1.287
Phoenix SecureCore™ for Intel Tiger Lake 4.3.0.1 – < 4.3.0.236 4.3.0.236
Phoenix SecureCore™ for Intel Jasper Lake 4.3.1.1 – < 4.3.1.184 4.3.1.184
Phoenix SecureCore™ for Intel Alder Lake 4.4.0.1 – < 4.4.0.269 4.4.0.269
Phoenix SecureCore™ for Intel Raptor Lake 4.5.0.1 – < 4.5.0.218 4.5.0.218
Phoenix SecureCore™ for Intel Meteor Lake 4.5.1.1 – < 4.5.1.15 4.5.1.15

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References