high7.4
CVE-2021-38578
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
Impact
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tianocore | Edk2 | through 202202 |
| Insyde | Kernel | Versions 5.0, 5.1, 5.2, 5.3, 5.4, 5.5 |