Out-of-bounds Write Vulnerability in EDK2 BIOS by TianoCore

CVE-2026-14968

What is CVE-2026-14968?

The EDK2 BIOS, developed by TianoCore, contains vulnerabilities that allow skilled and authorized users or attackers to execute an Out-of-bounds Write. This can occur through local access, potentially undermining the integrity of the System Management Mode (SMM) handler. Exploiting this flaw could lead to significant system instability and may result in a denial of service, adversely affecting both integrity and availability of the system. Organizations are advised to assess their EDK2 implementations and apply necessary patches to mitigate these risks.

References