Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs

Researchers disclosed CVE-2024-0762 — a patched buffer-overflow flaw in Phoenix SecureCore UEFI that affects many Intel processor families. The vulnerability arises from an unsafe TPM configuration variable and can allow local attackers to escalate privileges and execute code at the UEFI runtime level, posing persistence and supply-chain risks; Phoenix and OEMs (e.g., Lenovo) have released updates.