CVE-2019-11098

2021-07-1413:28:44

intel

www.cve.org

input validation

mdemodulepkg

edkii

unauthenticated user

privilege escalation

denial of service

information disclosure

physical access

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.

CNA Affected

[
  {
    "product": "Tianocore",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]