An integer overflow in the UEFI firmware component known as the Slim Bootloader allows a local attacker with privileged system access to build specialized input that triggers the overflow. This flaw can lead to privilege escalation and code execution, granting the attacker complete control that compromises the confidentiality, integrity, and availability of the affected system. The vulnerability is identified as a CWE‑190 error, which is an integer overflow or wraparound weakness.

The flaw affects systems that use Intel’s Slim Bootloader firmware. No specific firmware version numbers are disclosed in the current data, so any host running the Slim Bootloader should be considered potentially vulnerable. The hardware vendor is Intel, and the affected component is the UEFI firmware that initializes the boot process.

The CVSS score of 8.7 marks this as a high‑severity vulnerability. Exploitation requires local system access and a privileged user account, but the attack complexity is low and no user interaction is needed. Although the EPSS score is not available, the lack of any listing in the CISA KEV catalog suggests that widespread exploitation is not yet documented. Nonetheless, the potential for complete system takeover makes this a critical risk for any impacted infrastructure.