infosec@edk2.groups.io
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS infosec@edk2.groups.io
03
assessed vulnerabilities (22)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-97631US | — | — | ||
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds
Write”, Classic
Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful… | ||||
| CVE-2025-2296US | — | — | ||
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control fl… | ||||
| CVE-2024-38798US | — | — | ||
EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vuln… | ||||
| CVE-2024-38805US | — | — | ||
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial… | ||||
| CVE-2025-3770US | — | — | ||
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitra… | ||||
| CVE-2024-38797US | — | — | ||
EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A success… | ||||
| CVE-2025-2295US | — | — | ||
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial… | ||||
| CVE-2024-38796US | — | — | ||
EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this v… | ||||
| CVE-2024-1298US | — | — | ||
EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vuln… | ||||
| CVE-2023-45237US | high7.5 | — | ||
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially… | ||||
| CVE-2023-45236US | high7.5 | — | ||
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This
vulnerability can be exploited by an attacker to gain unauthorized
access and potentially… | ||||
| CVE-2023-45235US | high8.8 | — | ||
EDK2's Network Package is susceptible to a buffer overflow vulnerability when
handling Server ID option
from a DHCPv6 proxy Advertise message. This
vulnerability can be… | ||||
| CVE-2023-45234US | high8.8 | — | ||
EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This
vulnerability can be exploited by… | ||||
| CVE-2023-45233US | high7.5 | — | ||
EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This
vulnerability can be exploited by… | ||||
| CVE-2023-45232US | high7.5 | — | ||
EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This
vulnerability can be exploited… | ||||
| CVE-2023-45231US | medium6.5 | — | ||
EDK2's Network Package is susceptible to an out-of-bounds read
vulnerability when processing Neighbor Discovery Redirect message. This
vulnerability can be exploited by an attac… | ||||
| CVE-2023-45230US | high8.8 | — | ||
EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This
vulnerability can be exploited by an attacker to gain u… | ||||
| CVE-2023-45229US | medium6.5 | — | ||
EDK2's Network Package is susceptible to an out-of-bounds read
vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message. This
vulnerability can be ex… | ||||
| CVE-2022-36765US | high7.8 | — | ||
EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of… | ||||
| CVE-2022-36764US | high7.8 | — | ||
EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this… | ||||