Skip to content
OpenAdvisories
Low · 2.3 CVE-2024-29980 EUVD-2024-26952GHSA-v29f-v8vv-v975

Unsafe Handling of IHV UEFI Variables

Published Jan 14, 2025 · Updated Jul 28, 2025 · Assigned by Phoenix

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™ for Intel Kaby Lake: before 4.0.1.1012; SecureCore™ for Intel Coffee Lake: before 4.1.0.568; SecureCore™ for Intel Comet Lake: before 4.2.1.292; SecureCore™ for Intel Ice Lake: before 4.2.0.334.

Affected products

VendorProductAffectedFixed
Phoenix SecureCore™ for Intel Kaby Lake < 4.0.1.1012 4.0.1.1012
Phoenix SecureCore™ for Intel Coffee Lake < 4.1.0.568 4.1.0.568
Phoenix SecureCore™ for Intel Comet Lake < 4.2.1.292 4.2.1.292
Phoenix SecureCore™ for Intel Ice Lake < 4.2.0.334 4.2.0.334

Advisories 1

References