Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2024-38798

Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TianoCore

Description

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TianoCore EDK2

Default version status: unaffected

  • 0 to < edk2-stable202511affected

References