CVE-2019-11098

Name of the Vulnerable Software and Affected Versions EDKII (affected versions not specified)

Description The issue is related to insufficient input validation in the MdeModulePkg component of EDKII, which may allow an unauthenticated user with physical access to potentially enable escalation of privilege, denial of service, and/or information disclosure. This could lead to unauthorized access to confidential data, disruption of data integrity, and service disruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.