FlawAtlas
Search the atlas
UBUNTU-CVE-2024-38797 Moderate

UBUNTU-CVE-2024-38797

EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability.

Exploit probability Not scored
Published April 7, 2025
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:20.04:LTS edk2

15 explicit affected versions

Ubuntu:22.04:LTS edk2

13 explicit affected versions

Ubuntu:24.04:LTS edk2

13 explicit affected versions

Ubuntu:Pro:16.04:LTS edk2

7 explicit affected versions

Ubuntu:Pro:18.04:LTS edk2

12 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2024-38797

EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availability.

View original source

05 / REFERENCES

Further evidence