CVE-2019-14562

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Nov 23, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-145637.8Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-145657.8Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, maCVE-2019-145667.8Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information CVE-2019-145687.8Improper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an authenticated user to potentially enable escCVE-2019-145697.8Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of CVE-2019-14577.8A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'MicroCVE-2019-145707.8Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of sCVE-2019-145745.5Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentiallyCVE-2019-145757.8Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via loCVE-2019-14587.8An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k CVE-2019-145847.8Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-145868.0Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure
CVE-2019-14562: Medium severity, CVSS 5.5 | Vulnix