This vulnerability involves an integer overflow in the UEFI firmware of the Slim Bootloader, which may be exploited by a privileged user through a local attack of low complexity. The attack does not require user interaction or special internal knowledge. Exploitation could enable local code execution, resulting in high impacts to confidentiality, integrity, and availability of the affected system. The CVSS 4.0 base score is 8.7, reflecting high severity with local attack vector, low attack complexity, privileged attack requirements, no user interaction, and high impacts across confidentiality, integrity, and availability.

The vulnerability can lead to escalation of privilege and local code execution by a system software adversary with privileged user access. This may cause high impact on system confidentiality, integrity, and availability, potentially compromising the entire system's security posture.

Patch status is not yet confirmed — no official fix or remediation level is provided in the available data. It is recommended to monitor the vendor advisory for updates on patches or mitigations. Until a fix is available, restrict privileged local access to trusted users only and apply any vendor-recommended temporary mitigations once published.