Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
6.7
CVSSv3
CVE-2021-28211
Published: 11/06/2021 Updated: 22/06/2021
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.7 | Impact Score: 5.9 | Exploitability Score: 0.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Edk2
Vulnerability Summary
A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.
Vulnerability Trend
Vulnerable Product
Search on Vulmon
Subscribe to Product
tianocore edk2 202008
Vendor Advisories
Arch Linux Issues:
A security issue was found in EDK II before version 202011 A possible heap corruption in LzmaUefiDecompressGetInfo could lead to arbitrary code execution ...
References
CWE-787
https://bugzilla.tianocore.org/show_bug.cgi?id=1816
https://nvd.nist.gov
https://security.archlinux.org/CVE-2021-28211
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started