Buffer overflow in Intel BIOS
Priority LOW 36CWE-120Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.
Summary
Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable elevation of privilege or denial of service via adjacent access.
Why it matters now
EPSS 0.00548 46th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel BIOS | 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors | — | No fix listed | CNA |
- Intel BIOS Vendor— Affected 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors Fixed in — No fix listed CNA
CPE configurations NVD · 55
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:bios:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_4205u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:celeron_4305u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:celeron_4305ue:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:celeron_5205u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:celeron_5305u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_8100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_8100f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_8100t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_8300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:o:intel:bios:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_4205u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:celeron_4305u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:celeron_4305ue:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:celeron_5205u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:celeron_5305u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_8100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_8100f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_8100t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_8300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Show 45 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:core_i3_8300t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_8350k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_9100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_9100f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_9100t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_9300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_9300t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_9320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_9350k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i3_9350kf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_8400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_8400t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_8500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_8500t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_8600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_8600k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_8600t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9400f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9400t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9500f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9500t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9600k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9600kf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i5_9600t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_1060g7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_1060ng7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_1065g7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_1068ng7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_8086k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_8700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_8700k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_8700t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_9700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_9700f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_9700k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_9700kf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i7_9700t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i9_9900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i9_9900k:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i9_9900kf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i9_9900ks:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:h:intel:core_i9_9900t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:h:intel:core_i3_8300t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_8350k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_9100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_9100f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_9100t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_9300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_9300t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_9320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_9350k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i3_9350kf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_8400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_8400t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_8500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_8500t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_8600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_8600k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_8600t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9400f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9400t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9500f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9500t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9600k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9600kf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i5_9600t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_1060g7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_1060ng7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_1065g7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_1068ng7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_8086k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_8700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_8700k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_8700t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_9700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_9700f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_9700k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_9700kf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i7_9700t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i9_9900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i9_9900k:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i9_9900kf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i9_9900ks:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:h:intel:core_i9_9900t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-14557
- 2026-10-03 Alias added: GHSA-3p3w-92gc-7p27
References
More Intel Bios vulnerabilities
- TI-2020-09883 Out-of-bounds read in Intel Processors CVSS 3.1HIGH 7.8
- TI-2020-07004 Use of potentially dangerous function in Intel BIOS platform sample code for some… CVSS 3.1HIGH 7.8
- TI-2020-06947 Out-of-bounds read in Intel BIOS Advisory CVSS 3.1HIGH 7.8
- TI-2018-02648 Intel NUC kits with insufficient input validation in system firmware, potentially allows… CVSS 3.0HIGH 7.8
- TI-2020-09882 Insufficient control flow management in the firmware for some Intel(R) Processors may… CVSS 3.1MEDIUM 6.8
- TI-2020-09880 Improper initialization in the firmware for some Intel(R) Processors may allow a… CVSS 3.1MEDIUM 6.7
Sources
- CVE-2019-14557 · CVE Program
- CVE-2019-14557 · NVD
- FIRST EPSS
- GHSA-3p3w-92gc-7p27 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences