High-Risk Overflow Bug in Intel Chips Likely Impacts 100s of PC Models

The report describes CVE-2024-0762, a high-severity buffer overflow in Phoenix SecureCore UEFI (nicknamed "UEFIcanhazbufferoverflow") that can allow attackers to overflow UEFI variables via an unsafe GetVariable() call, potentially enabling privilege escalation and runtime code execution. Eclypsium researchers found the issue across multiple laptop models and Phoenix code versions, and the flaw could affect hundreds of Intel-based PC models; vendors face complex, multi-version patching and some systems will remain exposed until OEM updates are distributed.