PT-2024-1801 · Edk2 +10 · Edk2 +10

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to a heap buffer overflow vulnerability in the Tcg2MeasurePeImage function. This vulnerability can be triggered via a local network, potentially compromising...

CVE-2022-36764: Heap-based Buffer Overflow

EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...