edk2 vulnerabilities

Known vulnerabilities in the edk2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2024-38796	<2024.08-3
L CVE-2024-1298	<2024.05-1
L CVE-2023-48733	<2023.11-7
H Loop with Unreachable Exit Condition ('Infinite Loop')	<2023.11-6
H Out-of-Bounds	<2023.11-6
H Out-of-Bounds	<2023.11-6
M Out-of-bounds Read	<2023.11-6
M Out-of-bounds Read	<2023.11-6
H Loop with Unreachable Exit Condition ('Infinite Loop')	<2023.11-6
H Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	*
H Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	*
H Out-of-Bounds	<2023.11-6
H Out-of-Bounds	<2023.11-5
H Out-of-Bounds	<2023.11-5
H Out-of-Bounds	<2023.11-5
C Out-of-bounds Write	<2022.11-1
H CVE-2021-38576	<2021.11-1
H Out-of-Bounds	<2021.08-1
H Release of Invalid Pointer or Reference	<2021.11~rc1-1
M Improper Input Validation	<2020.11-5
L Inadequate Encryption Strength	<0~20190606.20d2e5a1-2
M Out-of-bounds Write	<2020.11-1
H Uncontrolled Recursion	<2020.11-1
H NULL Pointer Dereference	<2020.11-1
M Integer Overflow or Wraparound	<2020.05-4
M CVE-2019-14558	<0~20200229.4c0f6e34-1
M CVE-2019-14587	<0~20200229.4c0f6e34-1
H Use After Free	<0~20200229.4c0f6e34-1
L Integer Overflow or Wraparound	<0~20200229.4c0f6e34-1
L CVE-2019-14575	<0~20200229.4c0f6e34-1
L Resource Exhaustion	<0~20200229.4c0f6e34-1
L Improper Authentication	<0~20190828.37eef910-4
M Out-of-bounds Write	<0~20181115.85588389-1
L CVE-2018-12179	<0~20190606.20d2e5a1-2
L Out-of-bounds Write	<0~20180803.dd4cae4d-1
L Out-of-Bounds	<0~20181115.85588389-1
M Out-of-bounds Write	<0~20181115.85588389-3
H Out-of-bounds Write	<0~20181115.85588389-3
C Out-of-Bounds	<0~20181115.85588389-3

Vulnerability

Vulnerable Version

CVE-2024-38796

<2024.08-3

CVE-2024-1298

<2024.05-1

CVE-2023-48733

<2023.11-7

Loop with Unreachable Exit Condition ('Infinite Loop')

<2023.11-6

Out-of-Bounds

<2023.11-6