CVE-2023-40549CWE-125

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

Medium · published January 29, 2024

CVSS v3.1
6.2
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-01-29T16:29Z
EPSS history
Timeline
  • 29 JAN 16:29Z
    Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file
    cvelistv5