CVE-2019-0161

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 27, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-01623.8Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable information disclosurCVE-2019-01638.2Insufficient input validation in system firmware for Intel(R) Broadwell U i5 vPro before version MYBDWi5v.86A may allow an authenticated useCVE-2019-01647.3Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authentiCVE-2019-01654.4Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to CVE-2019-01667.5Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unautheCVE-2019-01684.4Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions CVE-2019-01698.8Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.CVE-2019-01706.7Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilegCVE-2019-01717.8Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalCVE-2019-01729.8A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privCVE-2019-01737.6Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially eCVE-2019-01743.3Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information discl
CVE-2019-0161: Medium severity, CVSS 5.5 | Vulnix