CVE-2019-14558

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	Intel BIOS	8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors

References

https://lists.debian.org/debian-lts-announce/2021/04/msg00032.htmlMailing List, Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.htmlVendor Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.htmlMailing List, Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00356.htmlVendor Advisory

Timeline

Published: Oct 5, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-145597.5Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.CVE-2019-14568.8A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially c CVE-2019-145625.5Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local a CVE-2019-145637.8Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-145657.8Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, ma CVE-2019-145667.8Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information CVE-2019-145687.8Improper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an authenticated user to potentially enable esc CVE-2019-145697.8Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of CVE-2019-14577.8A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'Micro CVE-2019-145707.8Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of s CVE-2019-145745.5Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially CVE-2019-145757.8Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via lo