TianoCore EDK II

• CVE-2021-38578 High 7.4 Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. 1.0%
• CVE-2021-38575 Unrated NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. 2.0%
• CVE-2021-28216 Unrated BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. 0.4%
• CVE-2021-28211 Unrated A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. 0.4%
• CVE-2021-28213 Unrated Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. 1.1%
• CVE-2021-28210 Unrated An unlimited recursion in DxeCore in EDK II. 0.4%