Integer overflow

2024-01-0916:15:00

PRIOn knowledge base

www.prio-n.com

integer overflow

buffer overflow

edk2 vulnerability

createhob() function

local network

confidentiality

integrity

availability

nvd

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.