Skip to content
OpenAdvisories

Vendor

Red Hat Bootloader Team

1 known vulnerabilities.

Products

shim 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2022-28737

    There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables

    There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-b…

    Red Hat Bootloader Team shim shim shim Debian Ubuntu