CVE-2023-40551CWE-125

Shim: out of bounds read when parsing mz binaries

Medium · published January 29, 2024

CVSS v3.1
5.1
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.8th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-01-29T16:46Z
EPSS history
Timeline
  • 29 JAN 16:46Z
    Shim: out of bounds read when parsing mz binaries
    cvelistv5