EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.
References
Configurations
History
13 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability. |
21 Nov 2024, 07:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/tianocore/edk2/security/advisories/GHSA-4hcq-p8q8-hj8j - Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJ42V7O7F4OU6R7QSQQECLB6LDHKZIMQ/ - | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.0 |
13 Mar 2024, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jan 2024, 18:04
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:* | |
| References | () https://github.com/tianocore/edk2/security/advisories/GHSA-4hcq-p8q8-hj8j - Third Party Advisory | |
| CWE | CWE-119 | |
| First Time |
Tianocore
Tianocore edk2 |
09 Jan 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-09 16:15
Updated : 2025-02-13 17:15
NVD link : CVE-2022-36764
Mitre link : CVE-2022-36764
CVE.ORG link : CVE-2022-36764
JSON object : View
Products Affected
tianocore
- edk2