CyberSecBulletin

Theopolis vulnerabilities

We track 2 vulnerabilities in Theopolis products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Theopolis vulnerabilities

  • 9.8 Critical severity

    uefi-firmware-parser: Out-of-bounds Write

    CVE-2026-54334Theopolis

    UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen() in uefi_firmware/compression/Tiano/Decompress.c reads Number from GetBits(Sd, CBIT) with CBIT = 9 and can obtain 511

  • 9.8 Critical severity

    uefi-firmware-parser: Out-of-bounds Write

    CVE-2026-54333Theopolis

    UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable() in uefi_firmware/compression/Tiano/Decompress.c does not validate that bit-length values read from a crafted Tiano o