CVE-2021-38578

Critical

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

TianoCore·CWE-124·Published 2022-03-03

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

95 chars

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

NVDen

95 chars

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

NVDes

122 chars

Unas comprobaciones existentes de CommBuffer en SmmEntryPoint no detectan el desbordamiento cuando es calculado BufferSize

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H