VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Jan 31, 2020· Updated Jun 17, 2026

CVE-2014-4860

CVE-2014-4860

Description

Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted data that is not properly handled during the coalescing phase.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Tianocore/Edk2
    cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
  • osv-coords
    pkg:deb/debian/edk2?arch=source
    Range: >= 0
  • American Megatrends Incorporated (AMI)/BIOSv5
    Range: unknown
  • Phoenix Technologies Ltd./SCT3v5
    Range: before 5/23/2014

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.