CVE-2023-40549CWE-125
Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file
Medium · published January 29, 2024
What it is
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.
The record
Technical detail
- CVSS v3.1
- 6.2 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00412 · 34.4th percentile
- Weakness
- CWE-125 · Out-of-bounds Read
- Published
- 2024-01-29T16:29Z
EPSS history
Timeline