Stack Overflow Vulnerability in EDK II Affecting Multiple Linux Distributions
CVE-2018-12181
6MEDIUM
Key Information:
- Vendor
- CVE Published:
- 27 March 2019
What is CVE-2018-12181?
A stack overflow vulnerability exists in EDK II when processing corrupted BMP files. This flaw could be exploited by an unprivileged user to potentially induce a denial of service condition or escalate privileges if they have local access to the system. The vulnerability underscores the need for secure handling of BMP files within the EDK II framework.
Affected Version(s)
Extensible Firmware Interface Development Kit (EDK II)