CVE-2019-0160

State: Published
Severity: 8.7 High
Published: Mar 27, 2019
Updated: Aug 4, 2024
Reserved: Nov 13, 2018

Description

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.

Scores

CVSS	Score	Vector	Source
3.0	8.7 High	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H	intel

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
Extensible Firmware Interface Development Kit (EDK II)n/a	N/AAffected

References

https://tianocore-docs.github.io/SecurityAdvisory/draft/partitiondxe-and-udf-buffer-overflow.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.