{"id":"CVE-2022-36764","aliases":["ALSA-2024:2264","ALSA-2024:3017","AZL-39016","AZL-39097","AZL-39292","BELL-CVE-2022-36764","CLSA-2025-1763122640","DEBIAN-CVE-2022-36764","DLA-4207-1","EUVD-2022-39464","GHSA-4hcq-p8q8-hj8j","OESA-2024-1314","OESA-2024-1315","OESA-2024-1316","OESA-2024-1317","OESA-2024-1318","OESA-2024-1319","RHSA-2024:2264","RHSA-2024:3017","RLSA-2024:2264","RLSA-2024:3017","UBUNTU-CVE-2022-36764","USN-6638-1","openSUSE-SU-2024:13949-1"],"status":"published","title":"Heap Buffer Overflow in Tcg2MeasurePeImage","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0029,"percentile":0.21675,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-122"],"published":"2024-01-09T16:09:44Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"edk2","fixed_in":["20240223gitedc6681206c1-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"hvloader","fixed_in":["1.0.1-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"edk2","fixed_in":["20230301gitf80f052277c8-40"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"edk2","fixed_in":["0.0.202508-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"edk2","fixed_in":["0.0.202508-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"edk2","fixed_in":["0.0.202508-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"edk2","fixed_in":["2022.11-6+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"edk2","fixed_in":["2023.11-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"edk2","fixed_in":["2023.11-5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"edk2","fixed_in":["0~20191122.bd85bf54-2ubuntu3.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"edk2","fixed_in":["2022.02-3ubuntu0.22.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:9","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Azure Linux:3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240223gitedc6681206c1-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"hvloader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230301gitf80f052277c8-40"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.202208-r0"},{"fixed":"0.0.202508-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.202308-r2"},{"fixed":"0.0.202508-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.0.202302-r0"},{"fixed":"0.0.202508-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20221207gitfff6d81270b5-9.el9_2.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.11-6+deb12u1"}]}],"versions":["2022.11-6"]},{"source":"osv","ecosystem":"Debian:13","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.11-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.11-5"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.11-2+deb11u3"}]}],"versions":["2020.11-2","2020.11-2+deb11u1","2020.11-2+deb11u2"],"bundled":16},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-20.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202002-19.oe2003sp4"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-16.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-16.oe2203sp1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-16.oe2203sp2"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202011-16.oe2203sp3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"edk2-tools-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"edk2-ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:9","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20231122-6.el9"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20220126gitbb1bba3d77-13.el8_10"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20150106.5c2d456b-2","0~20160104.c2a892d7-1","0~20160408.ffea0a2c-2","0~20160408.ffea0a2c-2ubuntu0.1","0~20160408.ffea0a2c-2ubuntu0.2","0~20160408.ffea0a2c-2ubuntu0.2+esm1","0~20160408.ffea0a2c-2ubuntu0.2+esm3","0~20160408.ffea0a2c-2ubuntu0.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0~20170911.5dfba97c-1","0~20171010.234dbcef-1","0~20171027.76fd5a66-1","0~20171205.a9212288-1","0~20180105.0bc94c74-1","0~20180205.c0d9813c-1","0~20180205.c0d9813c-2","0~20180205.c0d9813c-2ubuntu0.1","0~20180205.c0d9813c-2ubuntu0.2","0~20180205.c0d9813c-2ubuntu0.3","0~20180205.c0d9813c-2ubuntu0.3+esm1","0~20180205.c0d9813c-2ubuntu0.3+esm2","0~20180205.c0d9813c-2ubuntu0.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20191122.bd85bf54-2ubuntu3.5"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.2"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20191122.bd85bf54-2ubuntu3.5"}]}],"versions":["0~20190606.20d2e5a1-2ubuntu1","0~20190828.37eef910-3","0~20190828.37eef910-4","0~20191122.bd85bf54-1","0~20191122.bd85bf54-1ubuntu1","0~20191122.bd85bf54-2","0~20191122.bd85bf54-2ubuntu1","0~20191122.bd85bf54-2ubuntu2","0~20191122.bd85bf54-2ubuntu3","0~20191122.bd85bf54-2ubuntu3.1","0~20191122.bd85bf54-2ubuntu3.2","0~20191122.bd85bf54-2ubuntu3.3","0~20191122.bd85bf54-2ubuntu3.4"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"edk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.02-3ubuntu0.22.04.2"}]}],"versions":["2021.08~rc0-2","2021.08-3","2021.11~rc1-1","2021.11-1","2021.11-2","2022.02~rc1-1","2022.02~rc1-1ubuntu1","2022.02-1","2022.02-2","2022.02-3","2022.02-3ubuntu0.22.04.1"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ovmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"202308-9.1"}]}],"bundled":2}],"products":[{"vendor":"tianocore","product":"edk2"}],"references":[{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-4hcq-p8q8-hj8j","tags":["x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00007.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2264","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36763","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36764","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3446","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45229","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45231","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45232","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45233","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45235","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224962","tags":["report"]},{"url":"https://bugzilla.redhat.com/2257582","tags":["report"]},{"url":"https://bugzilla.redhat.com/2257583","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258677","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258688","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258691","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258694","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258700","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2264.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3017","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-36765","tags":["report"]},{"url":"https://bugzilla.redhat.com/2257584","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3017.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36764","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-36764","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1763122640.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-36764","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1314","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45230","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45233","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45235","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1315","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45234","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1316","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1317","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1318","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1319","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258700","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-14123","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-20963","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2264.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36763","tags":["advisory"]},{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-xvv8-66cq-prwr","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36764","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3446","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20230719.txt","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45229","tags":["advisory"]},{"url":"https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html","tags":["article"]},{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-gj7h","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45231","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pr27-mhpp-2ccr","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45232","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3r3p-444m-2g4p","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45233","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p9h6-p7cr-7842","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45235","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-h9v6-q439-p7j2","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257584","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-12626","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3017.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-36765","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36765","tags":["advisory"]},{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-ch4w-v7m3-g8wx","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2264","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3017","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-36764","tags":["report"]},{"url":"https://github.com/tianocore/edk2/pull/5264","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6638-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-36763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-36765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-45235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-48733","tags":["report"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2040137","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36764","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-36764","title":"Heap Buffer Overflow in Tcg2MeasurePeImage","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:09:44.836Z","modified":"2025-11-03T19:27:14.823Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-39464","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:09:44Z","modified":"2025-11-03T19:27:14Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:34.152725Z"}],"nvd":[{"id":"CVE-2022-36764","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43.327Z","modified":"2026-06-17T04:53:56.46Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-122","CWE-119"],"updated_at":"2026-11-02T14:07:39.811118Z"}],"osv":[{"id":"AZL-39016","title":"CVE-2022-36764 affecting package edk2 for versions less than 20240223gitedc6681206c1-1","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"AZL-39097","title":"CVE-2022-36764 affecting package hvloader for versions less than 1.0.1-3","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43Z","modified":"2026-04-21T04:28:39.265945Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-39292","title":"CVE-2022-36764 affecting package edk2 for versions less than 20230301gitf80f052277c8-40","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43Z","modified":"2026-04-21T04:28:41.829017Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"BELL-CVE-2022-36764","status":"published","published":"2024-01-09T16:15:43.327Z","modified":"2026-04-22T07:15:11.796232Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-36764","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43.327Z","modified":"2026-10-20T10:56:59.58459613Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DEBIAN-CVE-2022-36764","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:43.327Z","modified":"2026-11-03T08:03:03.830721257Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"OESA-2024-1314","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\n\nEDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.\r\n\r\n(CVE-2022-36764)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45230)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45232)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45233)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability when\r\n\r\n\r\n\r\n\r\n\r\nhandling Server ID option \r\n\r\n\r\n\r\n from a DHCPv6 proxy Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45235)","status":"published","published":"2024-03-22T11:06:45Z","modified":"2026-08-18T01:18:19.428230853Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1315","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\n\nEDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.\r\n\r\n(CVE-2022-36764)\r\n\r\nEDK2\u0026apos;s Network Package is susceptible to an out-of-bounds read\n vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.(CVE-2023-45229)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45230)\r\n\r\nEDK2\u0026apos;s Network Package is susceptible to an out-of-bounds read\n vulnerability when processing  Neighbor Discovery Redirect message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality.(CVE-2023-45231)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45232)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45233)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45234)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability when\r\n\r\n\r\n\r\n\r\n\r\nhandling Server ID option \r\n\r\n\r\n\r\n from a DHCPv6 proxy Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45235)","status":"published","published":"2024-03-22T11:06:45Z","modified":"2026-08-18T01:18:19.435909727Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1316","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\n\nEDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.\r\n\r\n(CVE-2022-36764)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45230)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45232)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45233)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability when\r\n\r\n\r\n\r\n\r\n\r\nhandling Server ID option \r\n\r\n\r\n\r\n from a DHCPv6 proxy Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45235)","status":"published","published":"2024-03-22T11:06:45Z","modified":"2026-08-18T01:18:19.466801338Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1317","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\n\nEDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.\r\n\r\n(CVE-2022-36764)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45230)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45232)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45233)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability when\r\n\r\n\r\n\r\n\r\n\r\nhandling Server ID option \r\n\r\n\r\n\r\n from a DHCPv6 proxy Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45235)","status":"published","published":"2024-03-22T11:06:45Z","modified":"2026-08-18T01:18:19.505310315Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1318","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\n\nEDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.\r\n\r\n(CVE-2022-36764)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45230)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45232)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45233)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability when\r\n\r\n\r\n\r\n\r\n\r\nhandling Server ID option \r\n\r\n\r\n\r\n from a DHCPv6 proxy Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45235)","status":"published","published":"2024-03-22T11:06:45Z","modified":"2026-08-18T01:18:16.383339612Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1319","title":"edk2 security update","description":"EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications.\r\n\r\nSecurity Fix(es):\r\n\r\n\nEDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.\r\n\r\n(CVE-2022-36764)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45230)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45232)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Availability.\r\n\r\n(CVE-2023-45233)\r\n\r\n EDK2\u0026apos;s Network Package is susceptible to a buffer overflow vulnerability when\r\n\r\n\r\n\r\n\r\n\r\nhandling Server ID option \r\n\r\n\r\n\r\n from a DHCPv6 proxy Advertise message. This\n vulnerability can be exploited by an attacker to gain unauthorized \naccess and potentially lead to a loss of Confidentiality, Integrity and/or Availability.\r\n\r\n(CVE-2023-45235)","status":"published","published":"2024-03-22T11:06:45Z","modified":"2026-08-18T01:18:16.470604408Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:2264","title":"Red Hat Security Advisory: edk2 security update","status":"published","published":"2024-09-23T17:59:54Z","modified":"2026-10-15T10:07:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3017","title":"Red Hat Security Advisory: edk2 security update","status":"published","published":"2024-09-23T18:00:04Z","modified":"2026-06-26T11:15:07Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2024:3017","title":"Important: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)\n\n* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)\n\n* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)\n\n* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)\n\n* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)\n\n* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)\n\n* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)\n\n* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T20:08:43.691431Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-36764","description":"EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.","status":"published","published":"2024-01-09T16:15:00Z","modified":"2026-10-05T19:20:11.098581365Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2024:2264","title":"Important: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)\n* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)\n* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)\n* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)\n* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)\n* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)\n* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)\n* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:07.702235774Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3017","title":"Important: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)\n* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)\n* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)\n* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)\n* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)\n* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)\n* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)\n* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.642406656Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1763122640","title":"edk2: Fix of 3 CVEs","description":"- CVE-2022-36763: fix heap buffer overflow in TPM2 measure boot library when\n  processing GPT partition tables\n- CVE-2022-36764: fix heap buffer overflow in TPM measure boot library when\n  calculating PE image event size\n- CVE-2022-36765: fix integer overflow in CreateHob() function that could lead\n  to undersized HOB allocation and out-of-bounds memory access\n- Refactoring: fix symbol collision between TPM libraries introduced by\n  CVE-2022-36763 and CVE-2022-36764 patches","status":"published","published":"2025-11-14T12:17:24Z","modified":"2026-06-01T00:31:25.673848677Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-4207-1","title":"edk2 - security update","status":"published","published":"2025-06-02T00:00:00Z","modified":"2026-03-09T01:21:23.402813Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2024:13949-1","title":"ovmf-202308-9.1 on GA media","description":"These are all security issues fixed in the ovmf-202308-9.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:45.042005Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2024:2264","title":"Important: edk2 security update","description":"EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. \n\nSecurity Fix(es):\n\n* edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message (CVE-2023-45235)\n\n* EDK2: heap buffer overflow in Tcg2MeasureGptTable() (CVE-2022-36763)\n\n* EDK2: heap buffer overflow in Tcg2MeasurePeImage() (CVE-2022-36764)\n\n* edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (CVE-2023-45229)\n\n* edk2: Out of Bounds read when handling a ND Redirect message with truncated options (CVE-2023-45231)\n\n* edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232)\n\n* edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233)\n\n* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.","status":"published","published":"2024-05-10T14:32:38.11477Z","modified":"2026-02-04T23:15:04.735915Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"USN-6638-1","title":"edk2 vulnerabilities","description":"Marc Beatove discovered buffer overflows exit in EDK2. An attacker on the\nlocal network could potentially use this to impact availability or possibly\ncause remote code execution. (CVE-2022-36763, CVE-2022-36764,\nCVE-2022-36765)\n\nIt was discovered that a buffer overflows exists in EDK2's Network Package\nAn attacker on the local network could potentially use these to impact\navailability or possibly cause remote code execution. (CVE-2023-45230,\nCVE-2023-45234, CVE-2023-45235)\n\nIt was discovered that an out-of-bounds read exists in EDK2's Network\nPackage An attacker on the local network could potentially use this to\nimpact confidentiality. (CVE-2023-45231)\n\nIt was discovered that infinite-loops exists in EDK2's Network Package\nAn attacker on the local network could potentially use these to impact\navailability. (CVE-2023-45232, CVE-2023-45233)\n\nMate Kukri discovered that an insecure default to allow UEFI Shell in\nEDK2 was left enabled in Ubuntu's EDK2. An attacker could use this to\nbypass Secure Boot. (CVE-2023-48733)\n","status":"published","published":"2024-02-15T01:36:15Z","modified":"2026-04-27T17:04:39.263284Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}