Skip to contentTianocore Edk Ii vulnerabilities
- tianocore edk iiBootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting...CVE-2021-28216Fix available7.8 High
- tianocore edk iiInsufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to...CVE-2019-11098Fix available6.8 Medium
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreStack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial...CVE-2019-0161Fix available5.5 Medium
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreImproper configuration in system firmware for EDK II may allow unauthenticated user to...CVE-2018-12179Fix available7.8 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreInsufficient memory write check in SMM service for EDK II may allow an authenticated user to...CVE-2018-12182Fix available6.7 Medium
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreStack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable...CVE-2018-12183Fix available6.8 Medium
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), fedoraproject fedora +6 more +8 moreBuffer overflow in system firmware for EDK II may allow unauthenticated user to potentially...CVE-2019-0160Fix available8.7 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreStack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable...CVE-2018-12181Fix available6.0 Medium
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), opensuse leap +2 moreBuffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially...CVE-2018-12180Fix available8.8 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreBuffer overflow in network stack for EDK II may allow unprivileged user to potentially enable...CVE-2018-12178Fix available9.1 Critical
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii) +1 moreLogic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an...CVE-2018-3613Fix available7.8 High