Tianocore vulnerabilities
30 CVEs and advisories name Tianocore as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-14968AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads
- CVE-2026-18448Leak SMM RAM from the kernel (Simply TSA after an SMI)
- CVE-2026-97631Pre-boot RCE in EDK II PXE driver
- CVE-2025-2296Un-verified kernel bypass Secure Boot mechanism in direct boot mode
- CVE-2024-38798Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege
- CVE-2024-38805iSCSI Remote Memory Corruption and Denial of Service
- CVE-2025-3770SMM IDT Privilege Escalation Vulnerability
- CVE-2024-38797Out-of-bounds Read in HashPeImageByType()
- CVE-2025-2295Potential iSCSI R2T PDU Vulnerability
- CVE-2024-38796Integer overflow in PeCoffLoaderRelocateImage
- CVE-2024-1298Integer Overflow caused by divide by zero during S3 suspension
- CVE-2023-45234Buffer Overflow in EDK II Network Package
- CVE-2023-45233Infinite loop in EDK II Network Package
- CVE-2023-45232Infinite loop in EDK II Network Package
- CVE-2023-45235Buffer Overflow in EDK II Network Package
- CVE-2023-45237Use of a Weak PseudoRandom Number Generator in EDK II Network Package
- CVE-2023-45236Predictable TCP ISNs in EDK II Network Package
- CVE-2023-45231Out-of-Bounds Read in EDK II Network Package
- CVE-2023-45230Buffer Overflow in EDK II Network Package
- CVE-2023-45229Out-of-Bounds Read in EDK II Network Package
- CVE-2022-36765Integer Overflow in CreateHob
- CVE-2022-36764Heap Buffer Overflow in Tcg2MeasurePeImage
- CVE-2022-36763Heap Buffer Overflow in Tcg2MeasureGptTable
- CVE-2021-38578Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
- CVE-2021-38575NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
- CVE-2021-28216BootPerformanceTable pointer is read from an NVRAM variable in PEI.
- CVE-2021-28213Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.
- CVE-2021-28211A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
- CVE-2021-28210An unlimited recursion in DxeCore in EDK II.
- CVE-2014-8271Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a lo