Intel Management Engine Firmware
The issue is caused by multiple buffer overflows in the Intel Management Engine (ME) firmware, which can allow an attacker to execute arbitrary code. This can be exploited by an attacker with local access to the system.