TianoCore

Latest CVEs · RSS

• CVE-2025-2296 2025-12-09 · CVSS 8.4
  EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability co
• CVE-2024-38798 2025-12-09 · CVSS 5.8
  EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful explo
• CVE-2024-38805 2025-08-12 · CVSS 6.3
  EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability
• CVE-2025-3770 2025-08-07 · CVSS 7.0
  EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability
• CVE-2024-38797 2025-04-07 · CVSS 4.6
  EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecen
• CVE-2025-2295 2025-03-14 · CVSS 3.5
  EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability
• CVE-2024-38796 2024-09-27 · CVSS 5.9
  EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successf
• CVE-2024-1298 2024-05-30 · CVSS 6.0
  EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful
• CVE-2023-45234 2024-01-16 · CVSS 8.3
  EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability
• CVE-2023-45233 2024-01-16 · CVSS 7.5
  EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability
• CVE-2023-45232 2024-01-16 · CVSS 7.5
  EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerabil
• CVE-2023-45235 2024-01-16 · CVSS 8.3
  EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This v
• CVE-2023-45237 2024-01-16 · CVSS 5.3
  EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized ac
• CVE-2023-45236 2024-01-16 · CVSS 5.8
  EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized ac
• CVE-2023-45231 2024-01-16 · CVSS 6.5
  EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerability can be e
• CVE-2023-45230 2024-01-16 · CVSS 8.3
  EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be exploited by a
• CVE-2023-45229 2024-01-16 · CVSS 6.5
  EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This vul
• CVE-2022-36765 2024-01-09 · CVSS 7.0
  EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Succes
• CVE-2022-36764 2024-01-09 · CVSS 7.0
  EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful e
• CVE-2022-36763 2024-01-09 · CVSS 7.0
  EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful
• CVE-2021-38578 2022-03-03 · CVSS 7.4
  Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
• CVE-2021-38576 2022-01-03
  A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways,
• CVE-2021-38575 2021-12-01
  NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
• CVE-2021-28216 2021-08-05
  BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.
• CVE-2021-28211 2021-06-11
  A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.