147 matches found
ShadeBIOS
Shade BIOS README is present in each Pkg folder ModuleLoaderPkg: DXE module that loads & executes DXE modules from a USB stick ShadeBiosPkg: Main Shade BIOS package VarPrintPkg: Library that allows printing debug messages or statuses to the UEFI variables Author Kazuki Matsuo. © FFRI Security, In...
SmmBackdoor
SMM backdoor for UEFI based platforms !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! This is legacy abandoned project, for current version of the backdoor check SMM Backdoor Next Gen project page and its documentation: https://github.com/Cr4sh/SmmBackdoorNg...
edk2-security
EDK2 BrotliCustomDecompressLib — heap overflow unfixed A heap-buffer-overflow in EDK2's own Brotli decompression glue MdeModulePkg/Library/BrotliCustomDecompressLib, present since 2017, unfixed at HEAD as of 2026-10-25. ASAN-confirmed with a proof-of-concept and an end-to-end controlled-corruptio...
edk2-security
EDK2 BrotliCustomDecompressLib — heap overflow unfixed A he...
Exploit for CVE-2025-4275
firmware-audit A read-only defensive scanner that audits a ru...
PT-2026-106521
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A use-after-free issue exists in the wcn36xx wifi driver. The wcn36xx dxe deinit function uses timer delete to tear down the TX ack timer, which dequeues the timer but does not wait for any...
PT-2026-115750
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown wcn36xx dxe deinit tears down the TX ack timer with timer delete, which only dequeues the timer and does not wait for a callback that is already executing; the...
Astra Linux – Vulnerability in edk2
Unlimited recursion in DxeCore in EDK II...
CVE-2025-20073
Improper buffer restrictions in the UEFI DXE module for some IntelR Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...
CVE-2025-20073
Improper buffer restrictions in the UEFI DXE module for some IntelR Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...
CVE-2025-20073: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper buffer restrictions in the UEFI DXE module for some IntelR Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...
MiracleLinux 9 : edk2-20230524-4.el9 (AXSA:2023-6904:04)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6904:04 advisory. edk2: Function GetEfiGlobalVariable2 return value not checked in DxeImageVerificationHandler CVE-2019-14560 openssl: Possible DoS translating ASN.1...
CVE-2023-45076
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
CVE-2023-45077
A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables...
EUVD-2017-9439
Malware in sbrugna...
EUVD-2023-24773
Malicious code in bioql PyPI...
EUVD-2023-24776
Malicious code in bioql PyPI...
EUVD-2023-49398
Malicious code in bioql PyPI...