CVE-2021-43614CWE-120

CVE-2021-43614

Medium · published September 3, 2026

CVSS v3.1
6.7
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00110 · 1.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-09-03T17:04Z
References (1)
https://www.insyde.com/security-pledge/sa-2022026/ · 8338d8cb-57f7-4252-abc0-96fd13e98d21
EPSS history
Timeline
  • 04 SEP 03:21Z
    EPSS moved — → 0%
    epss
  • 03 SEP 02:15Z
    VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution
    cvelistv5