Buffer Overflow Risk in Tianocore EDK2 by Intel
CVE-2014-8271

6.8MEDIUM

Key Information:

Vendor

Tianocore

Status
Edk2
Vendor
CVE Published:
6 February 2020

What is CVE-2014-8271?

A buffer overflow exists in the Reclaim function of Tianocore EDK2 versions prior to SVN 16280. This flaw can be exploited by physically proximate attackers to escalate their privileges by providing a long variable name, potentially allowing unauthorized access to system resources. Organizations using affected versions should prioritize upgrading to the latest SVN to mitigate security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EDK2 before SVN 16280

References

http://sourceforge.net/p/edk2/code/16280/
x_refsource_MISC
http://www.kb.cert.org/vuls/id/533140
x_refsource_MISC

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.