Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-3770

Опубликовано: 07 авг. 2025
Источник: debian
EPSS Низкий

Описание

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
edk2fixed2025.02-9package
edk2no-dsatrixiepackage
edk2no-dsabookwormpackage
edk2postponedbullseyepackage

Примечания

  • https://github.com/tianocore/edk2/security/advisories/GHSA-vx5v-4gg6-6qxr

  • only arch: amd64, other arch (particularly i386) are not affected

EPSS

Процентиль: 4%
0.00023
Низкий

Связанные уязвимости

CVSS3: 7
ubuntu
около 1 месяца назад

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.

redhat
около 1 месяца назад

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.

CVSS3: 7
nvd
около 1 месяца назад

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.

EPSS

Процентиль: 4%
0.00023
Низкий