CVE-2026-19411

The CVE-2026-19411 entry describes a NULL pointer dereference in the shim application of the dp.c library. The vulnerability occurs in the function is_removable_media_path() when devicepathtostr() returns NULL, potentially allowing a denial of service on systems that rely on the shim for the UEFI...