Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

EDK2 — Vulnerabilities & Security Advisories 22

All 22 CVE vulnerabilities found in EDK2, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for EDK2, an open-source UEFI firmware stack developed by the TianoCore community. It collects security advisories related to this product, covering the full historical record of disclosed flaws. Here you can track the vendor’s advisory patterns, analyze specific weakness classes like buffer overflows or memory errors, and review the complete vulnerability history of the EDK2 codebase to assess its security posture over time.

Vendor: Tianocore

CVE ID Title CVSS Severity Published
CVE-2025-2296 Un-verified kernel bypass Secure Boot mechanism in direct boot mode CWE-20 7.8AI High AI 2025-12-09
CVE-2024-38798 Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege CWE-200 7.8AI High AI 2025-12-09
CVE-2025-2486 UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu CWE-489 6.0AI Medium AI 2025-11-26
CVE-2024-38805 iSCSI Remote Memory Corruption and Denial of Service CWE-190 6.3 Medium 2025-08-12
CVE-2025-3770 SMM IDT Privilege Escalation Vulnerability CWE-693 7.0 High 2025-08-07
CVE-2024-38797 Out-of-bounds Read in HashPeImageByType() CWE-125 4.6 Medium 2025-04-07
CVE-2025-2295 Potential iSCSI R2T PDU Vulnerability CWE-190 3.5 Low 2025-03-14
CVE-2024-38796 Integer overflow in PeCoffLoaderRelocateImage CWE-122 5.9 Medium 2024-09-27
CVE-2024-1298 Integer Overflow caused by divide by zero during S3 suspension CWE-369 6.0 Medium 2024-05-30
CVE-2023-45234 Buffer Overflow in EDK II Network Package CWE-119 8.3 High 2024-01-16
CVE-2023-45233 Infinite loop in EDK II Network Package CWE-835 7.5 High 2024-01-16
CVE-2023-45232 Infinite loop in EDK II Network Package CWE-835 7.5 High 2024-01-16
CVE-2023-45235 Buffer Overflow in EDK II Network Package CWE-119 8.3 High 2024-01-16
CVE-2023-45237 Use of a Weak PseudoRandom Number Generator in EDK II Network Package CWE-338 5.3 Medium 2024-01-16
CVE-2023-45236 Predictable TCP ISNs in EDK II Network Package CWE-200 5.8 Medium 2024-01-16
CVE-2023-45231 Out-of-Bounds Read in EDK II Network Package CWE-125 6.5 Medium 2024-01-16
CVE-2023-45230 Buffer Overflow in EDK II Network Package CWE-119 8.3 High 2024-01-16
CVE-2023-45229 Out-of-Bounds Read in EDK II Network Package CWE-125 6.5 Medium 2024-01-16
CVE-2022-36765 Integer Overflow in CreateHob CWE-680 7.0 High 2024-01-09
CVE-2022-36764 Heap Buffer Overflow in Tcg2MeasurePeImage CWE-122 7.0 High 2024-01-09
CVE-2022-36763 Heap Buffer Overflow in Tcg2MeasureGptTable CWE-122 7.0 High 2024-01-09
CVE-2014-8271 Tianocore EDK2 缓冲区错误漏洞 6.8 - 2020-02-06

All 22 known CVE vulnerabilities affecting EDK2 with full Chinese analysis, references, and POCs where available.