edk2 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the edk2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L CVE-2024-2511	*
L CVE-2024-4741	*
M Out-of-Bounds	<2022.02-3ubuntu0.22.04.2
M Out-of-Bounds	<2022.02-3ubuntu0.22.04.2
M Out-of-Bounds	<2022.02-3ubuntu0.22.04.2
M CVE-2023-48733	<2022.02-3ubuntu0.22.04.2
L Improper Certificate Validation	*
L Improper Certificate Validation	*
L Inefficient Regular Expression Complexity	*
L Improper Certificate Validation	*
L Allocation of Resources Without Limits or Throttling	*
L Excessive Iteration	*
M Out-of-Bounds	<2022.02-3ubuntu0.22.04.2
M Out-of-bounds Read	*
M Out-of-Bounds	<2022.02-3ubuntu0.22.04.2
M Out-of-bounds Read	<2022.02-3ubuntu0.22.04.2
M Loop with Unreachable Exit Condition ('Infinite Loop')	<2022.02-3ubuntu0.22.04.2
M Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	<2022.02-3ubuntu0.22.04.2
M Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	*
M Out-of-Bounds	<2022.02-3ubuntu0.22.04.2
L Improper Check for Unusual or Exceptional Conditions	*
L CVE-2024-0727	*
M Out-of-bounds Write	<2022.02-3ubuntu0.22.04.3
L CVE-2019-14560	*