CVE-2023-40548

Name of the Vulnerable Software and Affected Versions Shim versions for 32-bit systems

Description The issue is related to a buffer overflow in the UEFI boot loader shim for 32-bit systems. This overflow occurs due to an addition operation involving a user-controlled value parsed from the PE binary used by shim. The value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw can cause memory corruption and may result in a crash or data integrity issues during the boot phase.

Recommendations For Shim versions for 32-bit systems, consider disabling the vulnerable component until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.