VDB
CVE-2023-39538
CVE-2023-39538
PUBLISHED
BRLY-LOGOFAIL-2023-016 High CVE-2023-39538 BINARLY efiXplorer team has discovered an integer overflow on memory allocation size that leads to OOB Write operations during PNG file processing in AMI firmware.
EPSS 0.22% · 12.2th percentile
Risk Scores
EPSS Score
0.22%
12.2th percentile
Timeline
- Dec 6, 2023 CVE Published
- Dec 7, 2023 EPSS Score
- Jan 6, 2024 EPSS Score
- Feb 5, 2024 EPSS Score
- Mar 6, 2024 EPSS Score
- Apr 5, 2024 EPSS Score
- May 4, 2024 EPSS Score
- Jun 3, 2024 EPSS Score
- Jul 3, 2024 EPSS Score
- Aug 2, 2024 EPSS Score
- Sep 1, 2024 EPSS Score
- Oct 1, 2024 EPSS Score
References
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory contents leak / information disclosure vulnerability in DXE driver. advisory
- [BRLY-2023-006] Multiple vulnerabilities in image parsing functions can be exploited by an attacker with local access. advisory
- [BRLY-LOGOFAIL-2023-015] Out-of-bounds Read in DXE driver advisory
- [BRLY-LOGOFAIL-2023-014] Out-of-bounds Read in DXE driver advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory contents leak / information disclosure vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
- Memory Corruption vulnerability in DXE driver. advisory
…and 1 more