CVE-2025-3052
An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.
An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.
Reserved 2025-03-31 | Published 2025-06-10 | Updated 2025-06-10 | Assigner certccCWE-123: Write-what-where Condition
uefi.org/...UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html
www.binarly.io/advisories/brly-dva-2025-001
Support options
