CyberRota Analysis
AI-GeneratedA heap buffer overflow vulnerability in the secure boot process could allow an attacker with physical access to escalate privileges on affected devices without requiring additional execution privileges or user interaction. Organizations using devices with the specified chipsets, particularly those in environments where physical security cannot be guaranteed, should prioritize applying the available patches to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.