4.6
CVSSv2

CVE-2018-12183

Published: 27/03/2019 Updated: 07/11/2023
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

tianocore edk ii -

Vendor Advisories

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access (CVE-2018-12182) Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access (CVE ...
Impact: Moderate Public Date: 2019-03-29 CWE: CWE-121->CWE-284 Bugzilla: 1694077: edk2: stack overfl ...