Skip to content
OpenAdvisories
High · 7.0 CVE-2026-14968 EUVD-2026-122796

AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads

Published Nov 10, 2026 · Assigned by TianoCore

Description

EDK2 contains vulnerabilities in
BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise
SMM handler integrity, cause system instability, and lead to denial of service. It could also impact Integrity and Availability.

Affected products

VendorProductAffectedFixed
TianoCore EDK2 ≤ edk2-stable202608 —

Advisories 2

References