Skip to content
OpenAdvisories

Vendor

theopolis

2 known vulnerabilities.

Products

uefi-firmware-parser 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-54334

    UEFI Firmware Parser: Heap out-of-bounds write in tiano decompressor `ReadCLen`

    UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen() in uefi_firmware/compression/Tiano/Decompress.c reads Number from GetBits(Sd, CBIT) with CBIT = 9 and can obtain 511…

    theopolis uefi-firmware-parser uefi-firmware PyPI
  • Critical 9.8
    CVE-2026-54333

    UEFI Firmware Parser: Stack out-of-bounds write in tiano decompressor MakeTable

    UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable() in uefi_firmware/compression/Tiano/Decompress.c does not validate that bit-length values read from a crafted Tiano …

    theopolis uefi-firmware-parser uefi-firmware PyPI