HIGH🇬🇧 English

CVE-2021-38578

CVSS 7.4v3.1pub. 2022-03-03upd. 2025-11-03

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L

  • Insyde Kernel

    OS
    Insyde
    5.05.15.25.35.45.5

  • Tianocore Edk2

    APP
    Tianocore
    ≤ 202202
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-52880HIGH7.9ten sam produkt

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...

CVE-2024-25078HIGH7.4ten sam produkt

A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB191301...

CVE-2023-45234HIGH8.3ten sam produkt

EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option fr...

CVE-2023-45232HIGH7.5ten sam produkt

EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the De...

CVE-2023-45230HIGH8.3ten sam produkt

EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6...