CVE-2024-24582

CVE-2024-24582 is an improper input validation vulnerability, classified under CWE-20, affecting the XmlCli feature in UEFI firmware for some Intel(R) processors. Published on 2025-02-12, it carries a CVSS v3.1 base score of 7.5 (AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H), indicating high impact across confidentiality, integrity, and availability with a changed scope.

The vulnerability can be exploited by a privileged user (PR:H) with local access (AV:L), though it requires high attack complexity (AC:H) and occurs without user interaction (UI:N). Successful exploitation may enable escalation of privilege, potentially allowing the attacker to gain higher levels of access within the affected system.

Intel's security advisory (INTEL-SA-01139) and a Debian LTS announcement provide details on the issue. Security practitioners should review these references for recommended mitigations and available patches.