OVMF vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the OVMF package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L Out-of-bounds Write	*
L Improper Certificate Validation	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
L Information Exposure	*
L Use After Free	*
L Reversible One-Way Hash	*
L Resource Exhaustion	*
M Resource Exhaustion	*
L Improper Certificate Validation	*
L Improper Certificate Validation	*
L Resource Exhaustion	*
H Incorrect Type Conversion or Cast	*
M Use After Free	*
M Information Exposure	*
L NULL Pointer Dereference	*
M Missing Required Cryptographic Step	*
M Arbitrary Command Injection	*
M Buffer Underflow	*
M Arbitrary Command Injection	*
M Improper Input Validation	*
H Out-of-Bounds	*
M Buffer Overflow	*
M Integer Overflow or Wraparound	*
M Resource Exhaustion	*
M Uncontrolled Recursion	*
M Integer Overflow or Wraparound	*
M NULL Pointer Dereference	*
M Unchecked Return Value	*
M Incorrect Authorization	*
M NULL Pointer Dereference	*