TI-2021-09442 CVE-2021-28216 · GHSA-6wgv-vj43-rpr5
BootPerformanceTable pointer is read from an NVRAM variable in PEI.
Priority LOW 34
BootPerformanceTable pointer is read from an NVRAM variable in PEI.
Vulnerabilities
11 records
TI-2019-08303 CVE-2019-11098 · GHSA-6g82-r87x-h953
Improper input validation in Tianocore
Priority LOW 30
Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
TI-2019-00140 CVE-2019-0161 · GHSA-jf2h-frpc-5873
Out-of-bounds write in TianoCore Extensible Firmware Interface Development Kit
Priority LOW 25
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
TI-2018-08730 CVE-2018-12181 · GHSA-wf68-vxvr-9r6g
Out-of-bounds write in TianoCore Extensible Firmware Interface Development Kit
Priority LOW 27
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.
TI-2018-08729 CVE-2018-12180 · GHSA-9ghw-h32x-5rfx
Out-of-bounds write in TianoCore Extensible Firmware Interface Development Kit
Priority MEDIUM 42
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access.
TI-2018-08728 CVE-2018-12179 · GHSA-q4p4-w8wc-6x23
Improper configuration in system firmware for EDK II may allow unauthenticated user to…
Priority LOW 34
Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
TI-2019-00139 CVE-2019-0160 · GHSA-w3xf-7pcp-xvwv
Buffer overflow in Extensible Firmware Interface Development Kit
Priority MEDIUM 45
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
TI-2018-08727 CVE-2018-12178 · GHSA-85f7-wwh2-8hrc
Memory corruption in TianoCore Extensible Firmware Interface Development Kit
Priority MEDIUM 44
Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network.
TI-2018-08731 CVE-2018-12182 · GHSA-rq43-vgrv-48m9
Insufficient memory write check in SMM service for EDK II may allow an authenticated user…
Priority LOW 30
Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
TI-2018-08732 CVE-2018-12183 · GHSA-9pwx-jwwh-vx6f
Out-of-bounds write in TianoCore Extensible Firmware Interface Development Kit
Priority LOW 31
Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.
TI-2018-02649 CVE-2018-3613 · GHSA-mv23-75j8-f4p8
Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an…
Priority LOW 34
Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.