Skip to contentTianocore Edk2 vulnerabilities
- tianocore edk2AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state readsCVE-2026-149687.0 High
- tianocore edk2Leak SMM RAM from the kernel (Simply TSA after an SMI)CVE-2026-184485.6 Medium
- tianocore edk2Pre-boot RCE in EDK II PXE driverCVE-2026-97631Public exploitFix available9.5 Critical
- andybalholm brotli, 7-zip p7zip, anthropic bun +100 more +102 moreOut-of-Bounds Write in Google Brotli DecoderCVE-2026-111497In KEVPublic exploitFix availableEPSS 82.6%9.2 Critical
- tianocore edk2Un-verified kernel bypass Secure Boot mechanism in direct boot modeCVE-2025-2296Fix available8.4 High
- tianocore edk2Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilegeCVE-2024-38798Fix available5.8 Medium
- tianocore edk2UEFI Shell accessible in AAVMF with Secure Boot enabled on UbuntuCVE-2025-2486Fix available3.7 Low
- tianocore edk2SMM IDT Privilege Escalation VulnerabilityCVE-2025-3770Fix available7.0 High
- tianocore edk2iSCSI Remote Memory Corruption and Denial of ServiceCVE-2024-38805Fix available6.3 Medium
- tianocore edk2Out-of-bounds Read in HashPeImageByType()CVE-2024-38797Fix available4.6 Medium
- tianocore edk2Potential iSCSI R2T PDU VulnerabilityCVE-2025-2295Fix available3.5 Low
- tianocore edk2Integer overflow in PeCoffLoaderRelocateImageCVE-2024-38796Fix available5.9 Medium
- tianocore edk2Integer Overflow caused by divide by zero during S3 suspensionCVE-2024-1298Fix available6.0 Medium
- canonical lxd, tianocore edk2 +1 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS...CVE-2023-49721Fix available6.7 Medium
- tianocore edk2, canonical lxd, canonical ltd. ubuntu edk ii +1 more +3 moreAn insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an...CVE-2023-48733Fix available6.7 Medium
- tianocore edk2Buffer Overflow in EDK II Network PackageCVE-2023-45234Fix available8.3 High
- tianocore edk2Infinite loop in EDK II Network PackageCVE-2023-45233Fix available7.5 High
- tianocore edk2Infinite loop in EDK II Network PackageCVE-2023-45232Fix available7.5 High
- tianocore edk2Buffer Overflow in EDK II Network PackageCVE-2023-45235Fix available8.3 High
- tianocore edk2Use of a Weak PseudoRandom Number Generator in EDK II Network PackageCVE-2023-45237Fix available5.3 Medium
- tianocore edk2Predictable TCP ISNs in EDK II Network PackageCVE-2023-45236Fix available5.8 Medium
- tianocore edk2Out-of-Bounds Read in EDK II Network PackageCVE-2023-45231Fix available6.5 Medium
- tianocore edk2Buffer Overflow in EDK II Network PackageCVE-2023-45230Fix available8.3 High
- tianocore edk2Out-of-Bounds Read in EDK II Network PackageCVE-2023-45229Fix available6.5 Medium
- tianocore edk2Integer Overflow in CreateHobCVE-2022-36765Fix available7.0 High
- tianocore edk2Heap Buffer Overflow in Tcg2MeasurePeImageCVE-2022-36764Fix available7.0 High
- tianocore edk2Heap Buffer Overflow in Tcg2MeasureGptTableCVE-2022-36763Fix available7.0 High
- insyde kernel, tianocore edk ii, edk2 +2 moreExisting CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.CVE-2021-38578Fix available7.4 High
- tianocore edk ii, edk2 +1 moreA BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty....CVE-2021-38576Fix available7.5 High
- insyde kernel, tianocore edk ii, edk2 +2 moreNetworkPkg/IScsiDxe has remotely exploitable buffer overflows.CVE-2021-38575Fix available8.1 High
- tianocore edk2, edk ii +1 moreExample EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.CVE-2021-28213Fix available7.5 High
- tianocore edk ii, edk2 +1 moreA heap overflow in LzmaUefiDecompressGetInfo function in EDK II.CVE-2021-28211Fix available6.7 Medium
- tianocore edk ii, edk2 +1 moreAn unlimited recursion in DxeCore in EDK II.CVE-2021-28210Fix available7.8 High
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreInteger overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to...CVE-2019-14562Fix available5.5 Medium
- extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +1 moreImproper authentication in EDK II may allow a privileged user to potentially enable information...CVE-2019-14553Fix available4.9 Medium
- tianocore edk2Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically...CVE-2014-82716.8 Medium
- tianocore edk2, american megatrends incorporated (ami) bios, phoenix technologies ltd. sct3 +2 moreInteger overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in...CVE-2014-48596.8 Medium
- tianocore edk2, american megatrends incorporated (ami) bios, phoenix technologies ltd. sct3 +2 moreMultiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update...CVE-2014-48606.8 Medium
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreLogic issue EDK II may allow an unauthenticated user to potentially enable denial of service via...CVE-2019-14587Fix available6.5 Medium
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreUse after free vulnerability in EDK II may allow an authenticated user to potentially enable...CVE-2019-14586Fix available8.0 High
- tianocore edk2Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable...CVE-2019-14584Fix available7.8 High
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreLogic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to...CVE-2019-14575Fix available7.8 High
- debian linux, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +2 moreInteger truncation in EDK II may allow an authenticated user to potentially enable escalation of...CVE-2019-14563Fix available7.8 High
- extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +1 moreUncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially...CVE-2019-14559Fix available7.5 High
- tianocore edk2Red Hat Security Advisory: ovmf security and enhancement updateCVE-2017-5731Fix available7.8 High