CVE-2018-12183: Out-of-bounds Write

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

CVE-2018-12179: Undefined Security Weakness

Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

CVE-2018-12181: Out-of-bounds Write

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access...

PT-2019-8876 · Intel +2 · Edk Ii +2

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: The issue is related to an insufficient memory write check in the SMM service, which may allow an authenticated user to potentially enable escalation of privilege, information disclosure,...

CVE-2018-12180: Out-of-bounds Write

Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access...

CVE-2018-12182: Unintended Proxy or Intermediary

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

CVE-2019-0161: Out-of-bounds Write

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access...

CVE-2018-3613: Undefined Security Weakness

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

CVE-2019-0160: Buffer Copy without Checking Size of Input

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access...

CVE-2018-12178: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network...

TianoCore EDK II BIOS Vulnerabilities - Lenovo Support US

No description provided...

PT-2019-8875

Name of the Vulnerable Software and Affected Versions EDK II affected versions not specified Description The issue is related to a stack overflow in corrupted bmp files, which may allow an unprivileged user to potentially enable denial of service or elevation of privilege via local access...

PT-2019-10725 · Intel +4 · Udk2018 +7

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified UDK2018 affected versions not specified UDK2017 affected versions not specified UDK2015 affected versions not specified Description: The issue is related to a logic problem in the variable service module...

HPSBHF03598 rev. 6 - EDK II Untested Memory Not Covered by SMM Page Protections

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: TianoCore Bugzilla VULNERABILITY SUMMARY Incorrect handling of memory types in TianoCore firmware potentially allows an attacker with local access to bypass...

CVE-2018-3613

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access...

PT-2018-3849

Name of the Vulnerable Software and Affected Versions EDK II affected versions not specified Description The issue is related to improper configuration in system firmware for EDK II, which may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure,...

PT-2018-2658

Name of the Vulnerable Software and Affected Versions EDK II affected versions not specified Description The issue is related to a buffer overflow in the network stack for EDK II, which may allow an unprivileged user to potentially enable escalation of privilege and/or denial of service via the...

PT-2019-11179 · Intel +5 · Edk Ii +5

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: The issue is related to a stack overflow in XHCI for EDK II, which may allow an unauthenticated user to potentially enable denial of service via local access. Recommendations: At the moment,...

PT-2018-3850

Name of the Vulnerable Software and Affected Versions EDK II affected versions not specified Description The issue is related to improper authentication in EDK II, which may allow a privileged user to potentially enable information disclosure via network access. This could allow a remote attacker...

PT-2018-2659

Name of the Vulnerable Software and Affected Versions EDK II affected versions not specified Description The issue is related to a buffer overflow in the BlockIo service, which may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure, and/or denial o...