CVE-2024-38796

MEDIUM EPSS 29.1%
Published Sep 27, 20241y ago · Modified Jun 17, 20262w ago
5.9 CVSS 3.1
Medium
Find Similar
Published Sep 27, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

CVSS Details

Base Score
5.9
Exploitability
1.2
Impact
4.7
Vector string
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
Attack Vector Adjacent
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity High
Availability Low

Threat Intelligence

EPSS Exploit Probability
29.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-122

References 3

  • github.com https://github.com/tianocore/edk2/security/advisories/GHSA-xpcr-7hjq-m6qm
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/06/msg00007.html
  • security.netapp.com https://security.netapp.com/advisory/ntap-20241206-0006/

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.