Skip to contentTianocore Edk Ii vulnerabilities
- insyde kernel, tianocore edk ii, edk2 +2 moreExisting CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.CVE-2021-38578Fix available7.4 High
- tianocore edk ii, edk2 +1 moreA BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty....CVE-2021-38576Fix available7.5 High
- insyde kernel, tianocore edk ii, edk2 +2 moreNetworkPkg/IScsiDxe has remotely exploitable buffer overflows.CVE-2021-38575Fix available8.1 High
- tianocore edk iiBootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting...CVE-2021-28216Fix available7.8 High
- tianocore edk2, edk ii +1 moreExample EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.CVE-2021-28213Fix available7.5 High
- tianocore edk ii, edk2 +1 moreA heap overflow in LzmaUefiDecompressGetInfo function in EDK II.CVE-2021-28211Fix available6.7 Medium
- tianocore edk ii, edk2 +1 moreAn unlimited recursion in DxeCore in EDK II.CVE-2021-28210Fix available7.8 High