edk2 vulnerabilities (openEuler)
78 vulnerabilities.
edk2openEulerBuffer Overflow in EDK II Network Package8.3 Highedk2openEulerOut-of-Bounds Read in EDK II Network Package6.5 Mediumedk2openEulerInteger Overflow in CreateHob7.0 Highedk2openEulerHeap Buffer Overflow in Tcg2MeasurePeImage7.0 Highedk2openEulerHeap Buffer Overflow in Tcg2MeasureGptTable7.0 Highedk2openEulerExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumedk2openEulerIncorrect cipher key & IV length processing7.5 Highedk2openEulerExcessive time spent checking DH keys and parameters5.3 Mediumedk2openEulerPossible DoS translating ASN.1 object identifiers6.5 Mediumedk2openEulerCertificate policy check not enabled5.3 Mediumedk2openEulerInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumedk2openEulerExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highedk2openEulerNULL dereference during PKCS7 data verification7.5 Highedk2openEulerX.400 address type confusion in X.509 GeneralName7.4 Highedk2openEulerUse-after-free following BIO_new_NDEF7.5 Highedk2openEulerDouble free after calling PEM_read_bio_ex7.5 Highedk2openEulerTiming Oracle in RSA Decryption5.9 Mediumedk2openEulerInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highedk2openEulerExisting CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.7.4 Highedk2openEulerA BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty....7.5 Highedk2openEulerRead buffer overruns processing ASN.1 strings7.4 Highedk2openEulerNetworkPkg/IScsiDxe has remotely exploitable buffer overflows.8.1 Highedk2openEulerBootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting...7.8 Highedk2openEulerInsufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to...6.8 Mediumedk2openEulerA heap overflow in LzmaUefiDecompressGetInfo function in EDK II.6.7 Mediumedk2openEulerAn unlimited recursion in DxeCore in EDK II.7.8 Highedk2openEulerInteger overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to...5.5 Mediumedk2openEulerNull pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable...7.8 High