uefi-firmware-parser vulnerabilities
2 known vulnerabilities in uefi-firmware-parser from Theopolis. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
uefi-firmware-parser: Out-of-bounds Write
UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen() in uefi_firmware/compression/Tiano/Decompress.c reads Number from GetBits(Sd, CBIT) with CBIT = 9 and can obtain 511
- 9.8 Critical severity
uefi-firmware-parser: Out-of-bounds Write
UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable() in uefi_firmware/compression/Tiano/Decompress.c does not validate that bit-length values read from a crafted Tiano o