CVE-2019-14575

Published: Nov 23, 2020

Modified: Aug 5, 2024

PUBLISHED

Description

Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

Vendor	Product	Versions
n/a	Extensible Firmware Interface Development Kit (EDK II)	affected `EDK II`

References

https://bugzilla.tianocore.org/show_bug.cgi?id=1608

x_refsource_MISC

[debian-lts-announce] 20210429 [SECURITY] [DLA 2645-1] edk2 security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-14575

Description

Affected Products

References