CVE-2019-14563 Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local…

Description

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products and versions

Product	Affected versions	Fixed in
Extensible Firmware Interface Development Kit (EDK II)	Versions not published

Other CVEs of Extensible Firmware Interface Development Kit (EDK II)

The 8 CVEs of Extensible Firmware Interface Development Kit (EDK II) →

CVE-2019-14587 Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access Not rated CVE-2019-14586 Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege,… Not rated CVE-2019-14575 Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation… Not rated CVE-2019-14562 Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of… Not rated