VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Jan 31, 2020· Updated Jun 17, 2026

CVE-2014-4859

CVE-2014-4859

Description

Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restrictions via crafted data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Tianocore/Edk2
    cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
  • osv-coords
    pkg:deb/debian/edk2?arch=source
    Range: >= 0
  • American Megatrends Incorporated (AMI)/BIOSv5
    Range: unknown
  • Phoenix Technologies Ltd./SCT3v5
    Range: before 5/23/2014

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.