CVE-2023-23904
NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L
- EPSS probability
- 0.05%
- CWE
- CWE-395
- Published
- 2024-09-16
- Last modified
- 2026-03-13
Affected products
- n/a UEFI firmware for some Intel(R) Processors
Weakness type
Related vulnerabilities
- CVE-2025-15514 — Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
- CVE-2024-36275 — NULL pointer dereference in some Intel(R) Optane(TM) PMem Management software versions before...
- CVE-2024-28030 — NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an...
- CVE-2023-48727 — NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an...
- CVE-2023-41082 — Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an...
- CVE-2023-25071 — NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers...
- CVE-2022-42879 — NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may...
- CVE-2022-29508 — Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an...