CVE-2018-12183

CVE-2018-12183 is a stack overflow in EDK II’s DxeCore. The issue can allow an unauthenticated, local attacker to potentially escalate privileges, disclose information, and cause a denial of service via local access. The vulnerability is part of broader EDK II issues, with related CVEs (including...

CVE-2018-3613

CVE-2018-3613 is reported in multiple advisories (notably EDK II/UDK UEFI firmware). The underlying issue is a logic error in the EDK II Variable service module for EDK II/UDK2018/UDK2017/UDK2015. Exploitation could allow an authenticated user to escalate privileges, disclose information, or caus...

PT-2019-8876 · Intel +2 · Edk Ii +2

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: The issue is related to an insufficient memory write check in the SMM service, which may allow an authenticated user to potentially enable escalation of privilege, information disclosure,...

TianoCore EDK II BIOS Vulnerabilities - Lenovo Support US

No description provided...

PT-2019-10725 · Intel +4 · Udk2018 +7

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified UDK2018 affected versions not specified UDK2017 affected versions not specified UDK2015 affected versions not specified Description: The issue is related to a logic problem in the variable service module...

HPSBHF03598 rev. 6 - EDK II Untested Memory Not Covered by SMM Page Protections

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: TianoCore Bugzilla VULNERABILITY SUMMARY Incorrect handling of memory types in TianoCore firmware potentially allows an attacker with local access to bypass...

CVE-2018-3613

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

PT-2019-11179 · Intel +5 · Edk Ii +5

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: The issue is related to a stack overflow in XHCI for EDK II, which may allow an unauthenticated user to potentially enable denial of service via local access. Recommendations: At the moment,...