Summary
Ein lokaler Angreifer kann eine Schwachstelle in TianoCore EDK2 ausnutzen, um einen Denial-of-Service-Zustand auszulösen oder beliebigen Code auszuführen.
Product
TianoCore EDK2 ist die Referenzimplementierung von UEFI von Intel.
Vulnerabilities 1
-
High 7.0
AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads
EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system instability, and lead to …
Revision history
-
#2
Neue Updates von LENOVO und Dell aufgenommen
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-979r-6wfh-gq4h vom 2026-11-02
https://github.com/tianocore/edk2/security/advisories/GHSA-979r-6wfh-gq4h
-
Lenovo Security Advisory LEN-231052 vom 2026-11-11
https://support.lenovo.com/us/en/product_security/LEN-231052
-
Dell Security Advisory DSA-2026-333 vom 2026-11-11
https://www.dell.com/support/kbdoc/de-de/000532159/dsa-2026-333-security-update-for-dell-client-platform-for-multiple-am-pc1-1-d-ryzen-and-ryzen-embedded-integrated-graphics-driver-vulnerabilities