TianoCore vulnerabilities
We track 14 vulnerabilities in TianoCore products. 14 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
Latest TianoCore vulnerabilities
- 7.0 High severity
EDK2: Out-of-bounds Write
EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system instability, and lead to d
- 9.5 Critical severity
EDK2: Buffer Copy without Checking Size of Input
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It cou
- 8.4 High severity
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation”…
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impa
- 7.0 High severity
EDK2: Protection Mechanism Failure
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
- 7.5 High severity
edk2: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.
- 7.5 High severity
edk2: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.
- 8.8 High severity
edk2: Improper Restriction of Operations within the Bounds of a Memory Buffer
EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID option from a DHCPv6 proxy Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Conf
- 8.8 High severity
edk2: Improper Restriction of Operations within the Bounds of a Memory Buffer
EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confid
- 7.5 High severity
edk2: Loop with Unreachable Exit Condition
EDK2's Network Package is susceptible to an infinite lop vulnerability when parsing a PadN option in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Availa
- 7.5 High severity
edk2: Loop with Unreachable Exit Condition
EDK2's Network Package is susceptible to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Ava
- 8.8 High severity
edk2: Improper Restriction of Operations within the Bounds of a Memory Buffer
EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID option in DHCPv6 client. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality, Integrity a
- 7.8 High severity
edk2: Improper Restriction of Operations within the Bounds of a Memory Buffer
EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, an
- 7.8 High severity
edk2: Improper Restriction of Operations within the Bounds of a Memory Buffer
EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or a
- 7.8 High severity
edk2: Improper Restriction of Operations within the Bounds of a Memory Buffer
EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or