Skip to content
OpenAdvisories

Package · Debian

edk2

49 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-2486

    UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu

    The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous ver…

    Ubuntu edk2 edk2 edk2 Debian Ubuntu
  • Low 3.5
    CVE-2025-2295

    Potential iSCSI R2T PDU Vulnerability

    EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.

    TianoCore EDK2 edk2 edk2 Debian Ubuntu