CVE-2019-14561

Опубликовано: 28 фев. 2023

Источник: nvd

Описание

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.

Связанные уязвимости

CVE-2019-14561

redhat

почти 3 года назад

[REJECTED CVE] A vulnerability has been identified in EDK2 where a function PeCoffLoaderLoadImage() in library MdePkg/BasePeCoffLib does not properly compute the End address of PE sections, allowing the End address to be before the Base one. A malicious PE could be used to corrupt the memory during the boot process, by using a VirtualSize equals to 0.