EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.
References
Configurations
History
13 Mar 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
16 Jan 2024, 18:21
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-09 16:15
Updated : 2024-03-13 02:15
NVD link : CVE-2022-36765
Mitre link : CVE-2022-36765
CVE.ORG link : CVE-2022-36765
JSON object : View
Products Affected
tianocore
- edk2