edk2-ovmf vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the edk2-ovmf package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Heap-based Buffer Overflow	*
L Information Exposure	*
M Divide By Zero	<0:20220126gitbb1bba3d77-13.el8_10.2
L Use After Free	*
L Resource Exhaustion	*
L NULL Pointer Dereference	*
H Out-of-Bounds	<0:20220126gitbb1bba3d77-6.el8_9.6
H Out-of-bounds Read	<0:20220126gitbb1bba3d77-13.el8_10
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:20220126gitbb1bba3d77-13.el8_10
H Out-of-Bounds	<0:20220126gitbb1bba3d77-13.el8_10
H Out-of-Bounds	<0:20220126gitbb1bba3d77-13.el8_10
H Out-of-Bounds	<0:20220126gitbb1bba3d77-6.el8_9.6
M Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	<0:20220126gitbb1bba3d77-13.el8_10.2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:20220126gitbb1bba3d77-13.el8_10
M Information Exposure	<0:20220126gitbb1bba3d77-13.el8_10.2
H Integer Overflow to Buffer Overflow	<0:20220126gitbb1bba3d77-13.el8_10
H Integer Overflow to Buffer Overflow	<0:20220126gitbb1bba3d77-13.el8_10
H Integer Overflow to Buffer Overflow	<0:20220126gitbb1bba3d77-13.el8_10
L Resource Exhaustion	<0:20220126gitbb1bba3d77-6.el8_9.3
L Resource Exhaustion	*
H Incorrect Type Conversion or Cast	<0:20220126gitbb1bba3d77-4.el8
H Use After Free	<0:20220126gitbb1bba3d77-4.el8
H Double Free	<0:20220126gitbb1bba3d77-4.el8
H Information Exposure	<0:20220126gitbb1bba3d77-4.el8
M Buffer Underflow	*
L Improper Input Validation	*
H Out-of-Bounds	<0:20200602gitca407c7246bf-4.el8_4.2
M Buffer Overflow	<0:20200602gitca407c7246bf-4.el8_4.1
M Integer Overflow or Wraparound	<0:20190829git37eef91017ad-9.el8
M Heap-based Buffer Overflow	<0:20190308git89910a39dcfd-6.el8
M Stack-based Buffer Overflow	<0:20190308git89910a39dcfd-6.el8
M Stack-based Buffer Overflow	<0:20190308git89910a39dcfd-6.el8
M Resource Exhaustion	<0:20200602gitca407c7246bf-3.el8
H Out-of-bounds Read	<0:20180508gitee3198e672e2-9.el8_0.1
M Uncontrolled Recursion	<0:20210527gite1999b264f1f-3.el8
M Integer Overflow or Wraparound	<0:20210527gite1999b264f1f-3.el8
M NULL Pointer Dereference	<0:20210527gite1999b264f1f-3.el8
M Unchecked Return Value	<0:20220126gitbb1bba3d77-6.el8
L Improper Input Validation	*
M Incorrect Authorization	*
M NULL Pointer Dereference	<0:20210527gite1999b264f1f-3.el8