CVE-2018-12181

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.43%

Published

Mar 27, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.

Weaknesses (CWE)

CWE-787

Affected Products (1)

tianocore · edk_iivulnerable

References (16)

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00030.html

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00048.html

https://access.redhat.com/errata/RHSA-2019:2125

https://access.redhat.com/errata/RHSA-2019:3338

https://edk2-docs.gitbooks.io/security-advisory/content/stack-overflow-on-corrupted-bmp.html

PatchVendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ABTDKZK2G5XP6JCO3HXMPOA2NRTIYDZ/

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us

https://usn.ubuntu.com/4349-1/