shim vulnerabilities

1 known vulnerability in shim from Red Hat Bootloader Team. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  shim: Out-of-bounds Write

  CVE-2022-28737Jul 20, 2023Red Hat Bootloader Team

  There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bo