PT-2019-6290 · Intel+7 · Edk Ii+7
CVE-2021-28211
·
Publicado
2019-05-15
·
Atualizado
2024-10-10
CVSS v2.0
6.8
Média
| Vetor | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
EDK II (affected versions not specified)
Description
A heap overflow issue exists in the LzmaUefiDecompressGetInfo function. This issue can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Heap Based Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Centos
Edk Ii
Linuxmint
Red Hat
Rocky Linux
Suse
Ubuntu