CVE-2020-0541

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Out-of-bounds write in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-05427.8Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated CVE-2020-05435.5Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially CVE-2020-05447.8Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.39.5145 may allow an CVE-2020-05454.4Integer overflow in subsystem for Intel(R) CSME versions before 11.8.77, 11.12.77, 11.22.77 and Intel(R) TXE versions before 3.1.75, 4.0.25 CVE-2020-05467.8Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenti CVE-2020-05477.8Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user CVE-2020-05485.5Cleanup errors in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2020-05495.5Cleanup errors in some data cache evictions for some Intel(R) Processors may allow an authenticated user to potentially enable information d CVE-2020-05505.6Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information d CVE-2020-05515.6Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable infor CVE-2020-05534.4Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows* 10, may allow a privileged user to pot CVE-2020-05547.0Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows* 7, 8.1 and 10 may allow an unprivileged us