CVE-2026-25194

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Write in Intel Slim Bootloader Firmware

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: Intel Corporation

Description

Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-25194

EUVD

EUVD-2026-56521

Affected Vendors & Products

Vendor	Product	Version / Range
intel	slim_bootloader	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in the firmware of Intel(R) Slim Bootloader that may cause a denial of service. It requires a privileged user with local access and low complexity to exploit. No special internal knowledge or user interaction is needed.

Detection Guidance

This vulnerability is specific to Intel Slim Bootloader firmware and requires privileged local access for exploitation. Detection primarily involves checking the firmware version of the Slim Bootloader on affected systems. No direct network detection commands are provided in the context.

Impact Analysis

The vulnerability may lead to system denial of service, reducing availability. It does not directly impact confidentiality or integrity but may cause subsequent system instability or crashes.

Compliance Impact

This vulnerability may impact availability of the system with low severity, but does not directly affect confidentiality or integrity. It does not explicitly mention compliance impacts on standards like GDPR or HIPAA.

Mitigation Strategies

Update the Intel Slim Bootloader firmware to the latest version provided by Intel to address the out-of-bounds write vulnerability.

Hi! I’m here to help you understand CVE-2026-25194. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70