PT-2021-7868 · Edk2 +8 · Edk2 +8

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to a buffer overflow in the SmmEntryPoint function of the open-source UEFI EDK2 development environment. This allows a remote attacker to access confidential data,...

PT-2021-4745 · Tianocore +8 · Tianocore Edk2 +8

Name of the Vulnerable Software and Affected Versions: NetworkPkg/IScsiDxe affected versions not specified Tianocore edk2 affected versions not specified Description: The issue is related to remotely exploitable buffer overflows in the NetworkPkg/IScsiDxe and the IScsiHexToBin function of the...

UEFI EDK2 Capsule Update vulnerabilities

Overview The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism. Description The open source EDK2 project provides a reference implementation of the Unified Extensible Firmware Interface UEFI. Researchers at The MITRE Corporation have discovered...