Advisories · Technology
TianoCore EDK2.
Every CVE that names TianoCore EDK2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.5 CriticalCritical · CVSS 9+
Pre-boot RCE in EDK II PXE driver
- TianoCore EDK2
- Memory corruption
- CVSS 8.4 High
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
- TianoCore EDK2
- CWE-20
- CVSS 5.8 Medium
Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege
- TianoCore EDK2
- Information disclosure
- CVSS 6.3 Medium
iSCSI Remote Memory Corruption and Denial of Service
- TianoCore EDK2
- Memory corruption
- CVSS 7.0 High
SMM IDT Privilege Escalation Vulnerability
- TianoCore EDK2
- CWE-693
- CVSS 4.6 Medium
Out-of-bounds Read in HashPeImageByType()
- TianoCore EDK2
- Memory corruption
- CVSS 3.5 Low
Potential iSCSI R2T PDU Vulnerability
- TianoCore EDK2
- Memory corruption
- CVSS 5.9 Medium
Integer overflow in PeCoffLoaderRelocateImage
- TianoCore EDK2
- Memory corruption
- CVSS 6.0 Medium
Integer Overflow caused by divide by zero during S3 suspension
- TianoCore edk2
- Denial of service
- CVSS 8.3 High
Buffer Overflow in EDK II Network Package
- TianoCore edk2
- Memory corruption
- CVSS 7.5 High
Infinite loop in EDK II Network Package
- TianoCore edk2
- Denial of service
- CVSS 7.5 High
Infinite loop in EDK II Network Package
- TianoCore edk2
- Denial of service
- CVSS 8.3 High
Buffer Overflow in EDK II Network Package
- TianoCore edk2
- Memory corruption
- CVSS 5.3 Medium
Use of a Weak PseudoRandom Number Generator in EDK II Network Package
- TianoCore edk2
- Weak cryptography or TLS
- CVSS 5.8 Medium
Predictable TCP ISNs in EDK II Network Package
- TianoCore edk2
- Information disclosure
- CVSS 6.5 Medium
Out-of-Bounds Read in EDK II Network Package
- TianoCore edk2
- Memory corruption
- CVSS 8.3 High
Buffer Overflow in EDK II Network Package
- TianoCore edk2
- Memory corruption
- CVSS 6.5 Medium
Out-of-Bounds Read in EDK II Network Package
- TianoCore edk2
- Memory corruption
- CVSS 7.0 High
Integer Overflow in CreateHob
- TianoCore edk2
- Memory corruption
- CVSS 7.0 High
Heap Buffer Overflow in Tcg2MeasurePeImage
- TianoCore edk2
- Memory corruption
- CVSS 7.0 High
Heap Buffer Overflow in Tcg2MeasureGptTable
- TianoCore edk2
- Memory corruption
-
Tianocore EDK2: Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially…
- Tianocore EDK2
-
Tianocore EDK2: Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows…
- Tianocore EDK2