Buffer overflow in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code…
Priority LOW 32CWE-119Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Buffer overflow in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) in Intel Q67 Express, C202, C204, C206 Chipsets, and Mobile Intel QM67, and QS67 Chipset before 2nd_gen_i5_i7_SINIT_51.BIN Express; Intel Q57, 3450 Chipsets and Mobile Intel QM57 and QS57 Express Chipset before i5_i7_DUAL_SINIT_51.BIN and i7_QUAD_SINIT_51.BIN; Mobile Intel GM45, GS45, and PM45 Express Chipset before GM45_GS45_PM45_SINIT_51.BIN; Intel Q35 Express Chipsets before Q35_SINIT_51.BIN; and Intel 5520, 5500, X58, and 7500 Chipsets before SINIT ACM 1.1 allows local users to bypass the Trusted Execution Technology protection mechanism and perform other unspecified SINIT ACM functions via unspecified vectors.
Why it matters now
EPSS 0.00456 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 25
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* | up to 2nd_gen_i5_i7_sinit_1.9.bin | Vulnerable | Intel |
| cpe:2.3:h:intel:c202_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:c204_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:c206_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:mobile_intel_qm67_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:mobile_intel_qs67_chipset:_express-:*:*:*:*:*:*:* | _express- | Vulnerable | Intel |
| cpe:2.3:h:intel:q67_express_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* | up to i5_i7_dual_sinit_18.bin | Vulnerable | Intel |
| cpe:2.3:h:intel:3450_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:mobile_intel_qm57_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
- cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* Versions up to 2nd_gen_i5_i7_sinit_1.9.bin Vulnerable ·Intel
- cpe:2.3:h:intel:c202_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:c204_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:c206_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:mobile_intel_qm67_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:mobile_intel_qs67_chipset:_express-:*:*:*:*:*:*:* Versions _express- Vulnerable ·Intel
- cpe:2.3:h:intel:q67_express_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* Versions up to i5_i7_dual_sinit_18.bin Vulnerable ·Intel
- cpe:2.3:h:intel:3450_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:mobile_intel_qm57_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
Show 15 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:mobile_intel_qs57_express_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:q57_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* | up to i7_quad_sinit_20.bin | Vulnerable | Intel |
| cpe:2.3:h:intel:mobile_intel_qs57_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* | up to gm45_gs45_pm45_sinit_21.bin | Vulnerable | Intel |
| cpe:2.3:h:intel:mobile_intel_gm45_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:mobile_intel_gs45_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:mobile_intel_pm45_express_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* | up to q35_sinit_18.bin | Vulnerable | Intel |
| cpe:2.3:h:intel:q35_express_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* | up to 1.0 | Vulnerable | Intel |
| cpe:2.3:h:intel:5500_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:5520_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:7500_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:x58_chipset:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
- cpe:2.3:h:intel:mobile_intel_qs57_express_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:q57_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* Versions up to i7_quad_sinit_20.bin Vulnerable ·Intel
- cpe:2.3:h:intel:mobile_intel_qs57_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* Versions up to gm45_gs45_pm45_sinit_21.bin Vulnerable ·Intel
- cpe:2.3:h:intel:mobile_intel_gm45_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:mobile_intel_gs45_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:mobile_intel_pm45_express_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* Versions up to q35_sinit_18.bin Vulnerable ·Intel
- cpe:2.3:h:intel:q35_express_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:o:intel:sinit_authenticated_code_module:*:*:*:*:*:*:*:* Versions up to 1.0 Vulnerable ·Intel
- cpe:2.3:h:intel:5500_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:5520_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:7500_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:x58_chipset:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2011-5174
- 2026-10-03 Alias added: GHSA-5p4q-f644-6ppr
References
Sources
- CVE-2011-5174 · CVE Program
- CVE-2011-5174 · NVD
- FIRST EPSS
- GHSA-5p4q-f644-6ppr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences