All 16 CVE vulnerabilities found in Extensible Firmware Interface Development Kit (EDK II), with AI-generated Chinese analysis, references, and POCs.
This page aggregates security advisories for the Extensible Firmware Interface Development Kit (EDK II), focusing on implementation flaws within this open-source firmware framework. The collection encompasses a broad spectrum of vulnerabilities, including buffer overflows, use-after-free errors, and memory corruption issues, spanning from initial public disclosures through the most recent updates. Readers can utilize this index to track the security posture of the EDK II project over time, understand the specific categories of weaknesses affecting firmware code, or review the historical vulnerability record to assess risk patterns. By centralizing these data points, the page serves as a technical resource for developers and security analysts monitoring platform security. The entries highlight how specific coding practices in firmware modules can lead to exploitable conditions, providing context on the evolution of defenses against common attack vectors. This aggregation allows for a focused examination of how the project addresses reported defects, offering insights into patching practices and the recurring nature of certain memory management errors in low-level systems programming. The timeline reflects the continuous development cycle and the ongoing effort to harden the firmware stack against emerging threats.
Vendor: Extensible Firmware Interface Development Kit (EDK II)
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2019-14587 | EDK2 安全漏洞 | 6.5 | - | 2020-11-23 |
| CVE-2019-14586 | EDK2 资源管理错误漏洞 | 8.0 | - | 2020-11-23 |
| CVE-2019-14575 | EDK2 安全漏洞 | 7.8 | - | 2020-11-23 |
| CVE-2019-14563 | EDK2 输入验证错误漏洞 | 7.8 | - | 2020-11-23 |
| CVE-2019-14562 | EDK2 输入验证错误漏洞 | 5.5 | - | 2020-11-23 |
| CVE-2019-14559 | EDK2 资源管理错误漏洞 | 7.5 | - | 2020-11-23 |
| CVE-2019-14553 | EDK2 授权问题漏洞 | 4.9 | - | 2020-11-23 |
| CVE-2019-0161 | XHCI for EDK2 缓冲区错误漏洞 | 5.5 | - | 2019-03-27 |
| CVE-2018-12181 | EDK2 缓冲区错误漏洞 | 6.0 | - | 2019-03-27 |
| CVE-2018-12180 | EDK2 缓冲区错误漏洞 | 9.8 | - | 2019-03-27 |
| CVE-2018-12179 | EDK2 配置错误漏洞 | 7.8 | - | 2019-03-27 |
| CVE-2019-0160 | EDK2 缓冲区错误漏洞 | 9.8 | - | 2019-03-27 |
| CVE-2018-12178 | EDK2 安全漏洞 | 9.8 | - | 2019-03-27 |
| CVE-2018-12182 | EDK2 安全漏洞 | 7.8 | - | 2019-03-27 |
| CVE-2018-12183 | EDK2 缓冲区错误漏洞 | 7.8 | - | 2019-03-27 |
| CVE-2018-3613 | EDK2 权限许可和访问控制问题漏洞 | 7.8 | - | 2019-03-27 |
All 16 known CVE vulnerabilities affecting Extensible Firmware Interface Development Kit (EDK II) with full Chinese analysis, references, and POCs where available.