AZL-75896 CVE-2025-69420 affecting package edk2 for versions less than 20240524git3e722403cd16-14
Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An...