AZL-72556
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72556.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-72556
- Upstream
- Published
- 2025-12-09T16:17:41Z
- Modified
- 2026-04-21T04:36:45.914451Z
- Summary
- CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44
- Details
-
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.
- References