CVE-2025-20077 - CVE House
Back to Database
Status published Medium CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI...

Vulnerability Description

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some Intel(R) reference server platforms may allow a privileged user to enable denial of service via local access.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-20077

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Intel(R) reference server platforms
Vulnerable Versions:
See references

Timeline

Official Publish: August 12th, 2025
Last Modified: August 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)