AZL-72559
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72559.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-72559
- Upstream
- Published
- 2025-12-09T16:17:41Z
- Modified
- 2026-04-21T04:36:45.941457Z
- Summary
- CVE-2025-2296 affecting package hvloader for versions less than 1.0.1-15
- Details
-
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and Availability.
- References