CVE-2024-38796

medium

Description

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

References

https://github.com/tianocore/edk2/security/advisories/GHSA-xpcr-7hjq-m6qm

Details

Source: Mitre, NVD

Published: 2024-09-27

Updated: 2024-09-30

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:A/AC:H/Au:S/C:P/I:C/A:P

Severity: Medium

CVSS v3

Base Score: 5.9

Vector: CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L