Xeno Kovah

O problema está relacionado a um estouro de inteiro na fase do Drive Execution Environment (DXE) no recurso Capsule Update da implementação UEFI. Isso permite que invasores fisicamente próximos contornem as restrições de acesso previstas por meio de dados manipulados.

O problema diz respeito a vários estouros de inteiros na fase de inicialização Pre-EFI (PEI) do recurso Capsule Update na implementação UEFI. Isso permite que invasores fisicamente próximos contornem as restrições de acesso previstas, fornecendo dados manipulados que não são tratados adequadamente durante a fase de coalescência.

The issue is related to errors in the code of the EFI module in Mac OS X, which can be exploited by a remote attacker to access undeclared functions. The vulnerability is caused by the mishandling of arguments, allowing attackers to reach unused functions via unspecified vectors.

The issue is related to errors in specifying the range of protected registers in the EFI component of the operating system. This can be exploited by an attacker to cause a denial of service, potentially leading to a boot failure, by using a specially crafted application that writes to an unintended address.

The BIOS implementation does not enforce a BIOS CNTL locking protection mechanism upon being woken from sleep, allowing local users to conduct EFI flash attacks by leveraging console access.

The issue allows local users to conduct EFI flash attacks by leveraging root privileges, due to the lack of a locking protection mechanism when the system is woken from sleep.

The issue allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges. This is achieved by providing a crafted `rbu packet.pktNum` value in conjunction with a crafted `rbu packet.pktSize` value, exploiting a buffer overflow in the Dell BIOS.