CVE-2024-38796CWE-122
Integer overflow in PeCoffLoaderRelocateImage
Medium · published September 27, 2024
What it is
EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00370 · 29.8th percentile
- Weakness
- CWE-122 · Heap-based Buffer Overflow
- Published
- 2024-09-27T21:45Z
EPSS history
Timeline