1. CVE-Search
  2. CVE-2021-38578
ID CVE-2021-38578
Summary Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
References
Vulnerable Configurations
  • cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:-:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:2017-11-07:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:2017-11-07:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:2020-10-21:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:2020-10-21:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201808:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201808:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201811:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201811:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201903:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201903:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201905:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201905:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201908:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201908:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:201911:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:201911:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202002:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202002:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202005:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202005:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202008:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202008:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202011:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202011:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202102:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202102:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202105:*:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202105:*:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:rc0:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:rc0:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202108:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202108:rc1:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202111:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202111:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202111:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202111:rc1:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202202:-:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202202:-:*:*:*:*:*:*
  • cpe:2.3:a:tianocore:edk2:202202:rc1:*:*:*:*:*:*
    cpe:2.3:a:tianocore:edk2:202202:rc1:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 03-12-2022 - 14:25)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
Last major update 03-12-2022 - 14:25
Published 03-03-2022 - 22:15
Last modified 03-12-2022 - 14:25
Back to Top