CVE-2021-39300 | Vulnetix

CVE-2021-39300 PUBLISHED

BRLY-2021-006 High CVE-2021-39300 BINARLY efiXplorer team has discovered a stack overflow vulnerability that allows a local privileged user to access UEFI DXE driver and execute arbitrary code.

EPSS 0.42% · 34.3th percentile

Risk Scores

EPSS Score

0.42%

34.3th percentile

Timeline

Feb 4, 2022 CVE Published
Feb 17, 2022 EPSS Score
Mar 8, 2022 EPSS Score
Apr 11, 2022 EPSS Score
Jun 2, 2022 EPSS Score
Jul 26, 2022 EPSS Score
Sep 16, 2022 EPSS Score
Nov 8, 2022 EPSS Score
Dec 31, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Apr 15, 2023 EPSS Score
Jun 6, 2023 EPSS Score

References

The stack buffer overflow vulnerability leads to arbitrary code execution in UEFI DXE driver on multiple HP devices. advisory
The stack buffer overflow vulnerability leads to arbitrary code execution in UEFI DXE driver on multiple HP devices. advisory

Open in Interactive Console →