CVE-2022-28737 | BDVDB-2026-207759 Detail

Description#

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-07-20Record published in the CVE List.
2. Version 22024-10-22Most recent update recorded in the CVE List.