CVE-2022-28737

CVE-2022-28737 is confirmed with concrete technical details in connected records. The issue is an out-of-bounds write in the shim loading path, caused by handling of the SizeOfRawData field in EFI sections via handle_image(), leading to memory corruption and potential arbitrary code execution. Af...

CVE-2023-40547

CVE-2023-40547 affects the shim bootloader (shim and shim-unsigned variants) across multiple platforms. The root cause is that the first-stage UEFI boot loader trusts attacker-controlled values when parsing an HTTP response, enabling a remote code execution via a crafted HTTP request during early...

CVE-2023-40548

CVE-2023-40548 is a Shim (boot shim) vulnerability affecting 32-bit Shim, where an addition of a user-controlled PE-derived value used for memory allocation causes a heap-based buffer overflow, leading to memory corruption and potential crash during boot. The issue is described specifically for 3...

CVE-2023-40546

CVE-2023-40546 involves the shim/rhboot component. IBM and related advisories describe a vulnerability in the Shim boot path where a NULL pointer dereference can occur in the mirror_one_esl() function (mok.c), leading to a denial of service/crash when handling certain requests. The issue is discu...

CVE-2023-40549

CVE-2023-40549 affects the Shim/ rhboot shim component used during boot: an out-of-bounds read occurs when loading a PE binary due to improper boundary verification, allowing a crafted PE to crash Shim and cause denial of service. Connected advisories corroborate Shim-involvement and describe rel...

CVE-2023-40551

CVE-2023-40551 affects the Shim bootloader (MZ binary format) with an out-of-bounds read that can crash the boot process or expose data. Connected advisories confirm this issue across shim-related deployments and list fixes: Debian LTS advisory for shim up to 15.8-1/15.8-1~deb10u1 and IBM securit...

CVE-2023-40550

CVE-2023-40550 affects Shim/shim in boot path; root cause is an out-of-bounds read during SBAT validation, potentially exposing sensitive data during system boot. Related IBM/DS8K/HMC advisories describe multiple Shim CVEs consolidated under Power HMC, including fixes in microcode bundles (DS8900...

CVE-2014-3676

CVE-2014-3676 (shim): Heap-based buffer overflow in parsing IPv6 addresses can allow remote code execution via a crafted IPv6 address supplied by a remote server (tftp:// DHCPv6 boot option). Related issues include an out-of-bounds write during MOK handling and an out-of-bounds read in DHCPv6 par...

CVE-2014-3675

CVE-2014-3675 (and related CVEs 2014-3676, 2014-3677) describe issues in the shim component used by multiple Linux distributions. The primary item (CVE-2014-3675) is an out-of-bounds read triggered by parsing DHCPv6 packets, which can lead to remote denial of service. Additional entries in the co...

CVE-2014-3677

CVE-2014-3677 affects shim, where an out-of-bounds memory write in processing user-provided MOK (Machine Owner Keys) lists could enable a local attacker to execute arbitrary code on the system. Public details in connected documents reference related CVEs (3675/3676) affecting IPv6 handling and MO...