CVE Daily

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandler...

Medium CVSS 5.3

Overview

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some Intel(R) reference server platforms may allow a privileged user to enable denial of service via local access.

CWE: CWE-401 Published: 2025-08-12T17:15:28.770
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.3 (MEDIUM)
  • Detected tags: dos (tag impact: LOW)

Recommended actions:

  • Rate limiting, resource quotas and circuit breakers.

Recommended tools

Tags