← Vulnerability feed

Vulnerability record · CVE-2020-24491 · published 17 February 2021

CVE-2020-24491: Intel core i3 improper input validation vulnerability

Intel · Core I3

Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting SGX may allow a privileged user to potentially enable information disclosure via local access.

4.4 CVSS 3.1 Medium EPSS 0.30% · top 80.1% CWE-20 · Improper input validation
4.4CVSS 3.1 base score, v2 1.9
0.30%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting SGX may allow a privileged user to potentially enable information disclosure via local access.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00455.html PatchVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00455.html PatchVendor Advisory

Track CVE-2020-24491 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.6CVE-2018-12169Intel core i3 improper authentication vulnerabilityPlatform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th G…EPSS 0.55%7.3CVE-2018-3615Intel core i3 observable discrepancy vulnerabilitySystems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of inf…EPSS 6.3%6.7CVE-2021-0114Intel atom c3000 insecure default initialization vulnerabilityUnchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via …EPSS 0.27%6.7CVE-2021-0144Intel atom c3000 insecure default initialization vulnerabilityInsecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege …EPSS 0.33%6.7CVE-2017-5704Intel core i3 insufficiently protected credentials vulnerabilityPlatform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Core Processor, and 7th Gen Int…EPSS 0.29%5.6CVE-2018-3620Intel core i3 observable discrepancy vulnerabilitySystems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in th…EPSS 5.6%5.6CVE-2018-3646Intel core i3 information exposure vulnerabilitySystems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in th…EPSS 8.6%5.6CVE-2018-3693Intel atom c vulnerabilitySystems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker wi…EPSS 8.6%

Source: NIST National Vulnerability Database (record CVE-2020-24491), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.