CVE-2024-38797 — Out-of-bounds Read in HashPeImageByType()
EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A succ…
Published: 2025-04-07 · CVSS: 4.6 · CVSS 3.1
EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7