NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
TianoCore·CWE-124·Published 2021-12-01