[ CVE-2022-36764 · Published 9 Jan 2024 ]
Vulnerability in TianoCore edk2
CVSS 7.0
EPSS <1%1 agency advisoryFix available
[ Description ]Official description
EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.
[ Fixes ]Fixes and patches
- Security bulletin: Citrix CTX697256Vendor patch or bulletin · CERT-FR · support.citrix.com/support-home/kbsearch/article, cited by CERT-FR CERTFR-2026-AVI-1449
- Security bulletin: Citrix CTX697300Vendor patch or bulletin · CERT-FR · support.citrix.com/support-home/kbsearch/article, cited by CERT-FR CERTFR-2026-AVI-1449
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1449
Multiple vulnerabilities in Citrix products Translated from French
Multiple vulnerabilities have been discovered in Citrix products. They allow an attacker to cause remote arbitrary code execution and privilege escalation.