CVE-2021-38578

HIGH

EDK2 < 202202 - Out-of-bounds Write via CommBuffer Underflow

Title source: llm

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

Core 3

Core References

Issue Tracking, Vendor Advisory x_refsource_misc

Third Party Advisory

Mailing List

CVSS v3 7.4

EPSS 0.0100

EPSS Percentile 58.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-124 CWE-787

Status published

Products (7)

insyde/kernel 5.0

insyde/kernel 5.1

insyde/kernel 5.2

insyde/kernel 5.3

insyde/kernel 5.4

insyde/kernel 5.5

tianocore/edk2 < 202202

Published Mar 03, 2022

Tracked Since Feb 18, 2026