tianocore edk2 vulnerabilities in 2022, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 9.8CVE-2021-38578EPSS 1.0%2022-03-03

   Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

2. 7.5CVE-2021-38576EPSS 1.3%2022-01-03

   A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system.