critical9.5
CVE-2026-97631
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remo…
Impact
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m
- http://www.openwall.com/lists/oss-security/2026/10/28/4
- https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/
- https://github.com/microsoft/mu_basecore/pull/1989
- https://github.com/microsoft/mu_basecore/pull/1990
- https://news.ycombinator.com/item?id=50265393