Intel Slim Bootloader Firmware Security Bulletin: CVE-2026-28729/25194

Vulnerability Overview Intel ID: INTEL-SA-01475 Vulnerability Category: Firmware Impact: Denial of Service, Information Disclosure Severity: Low Release Date: August 11, 2026 Last Revised: August 11, 2026 Summary: A potential security vulnerability exists in Intel Slim Bootloader, which could lead to denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: 1. CVE-2026-28729: - Description: An integer overflow in UEFI firmware could lead to information disclosure. A system software attacker combining a low-complexity attack could lead to denial of service. The impact may occur via local access when the exploit requires no special internal knowledge and requires no user interaction. The potential vulnerability may affect Confidentiality (Low), Integrity (None), and Availability (Low). - CVSS Base Score: 2.4 Low - CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:R/VCL/VN/VAL:SC/L/SIN/SAL 2. CVE-2026-25194: - Description: An out-of-bounds write in firmware could lead to denial of service. A system software attacker combining a low-complexity attack could lead to denial of service. The impact may occur via local access when the exploit requires no special internal knowledge and requires no user interaction. The potential vulnerability may affect Confidentiality (None), Integrity (None), and Availability (None). - CVSS Base Score: 1.8 Low - CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VN:VAL/SC:N/SIN/SAN Affected Products Affected Products: - 12th Generation Intel® Core™ Processor (Mobile) - Intel® Pentium® Gold Processor Family (Desktop) - Intel® Celeron® Processor Family (Embedded) - Intel® Processor N-series (Mobile, Embedded) - Intel® Atom® Processor E3900 Series (Mobile, Desktop, Embedded) - Intel® Core™ Ultra Processors (Series 2) (Mobile) - Intel® Xeon® Processor E Family (Server) - 10th Generation Intel® Core™ Processor Family (Desktop, Mobile) - Intel® Atom® Processor X Series (Embedded) - Intel® Xeon® Processor D Family (Server, Embedded) - Intel® Core™ Ultra Processor (Series 1) (Mobile) - Intel® Core™ Ultra Processors (Series 3) (Mobile) - 13th Generation Intel® Core™ Processor (Mobile, Desktop) - 8th Generation Intel® Core™ Processors (Mobile, Embedded) Remediation Recommendation: Intel recommends updating Intel® Slim Bootloader to hash , dated April 22, 2026, or later. Acknowledgments Intel thanks Maxrb (CVE-2026-25194) and Oxaban (CVE-2026-28729) for reporting these issues. Revision History Version 1.0: August 11, 2026, Initial Release Legal Disclaimer Intel provides these materials "as is" without warranty of any kind, either express or implied. All products, dates, and specifications are based on current expectations and may change without notice. Intel products and described services may contain design defects or errors known as errata, which may cause the products to deviate from published specifications. Currently known errata are available upon request. Products that have reached end of service may no longer receive features or security updates. Features and benefits of Intel technology depend on system configuration and may require enabled hardware, software, or service activation. Performance varies by use, configuration, and other factors. Intel is committed to respecting human rights and avoiding causing or contributing to adverse impacts on human rights. Report a Vulnerability If you have information regarding security issues or vulnerabilities affecting Intel-branded products or technologies, please submit a report via the Integriti platform. For issues related to external Intel websites (Intel.com and related subdomains), please contact Intel’s External Security Research Team. Need Product Support? If you have questions regarding Intel product security features, require technical support, or would like product updates or patches, please visit the Support and Downloads page.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Slim Bootloader Firmware Security Bulletin: CVE-2026-28729/25194