DEBIAN-CVE-2026-97631
- Source
- https://security-tracker.debian.org/tracker/CVE-2026-97631
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-97631.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-97631
- Upstream
- CVE-2026-97631
- Published
- 2026-10-22T17:17:02Z
- Modified
- 2026-10-23T18:01:37Z
- Severity
-
- 9.5 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
- Summary
- [none]
- Details
-
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality, Integrity, and Availability.
- References
Affected packages
Debian:12 / edk2
Package
- Name
- edk2
- Purl
- pkg:deb/debian/edk2?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2022.*
2022.11-6
2022.11-6+deb12u1
2022.11-6+deb12u2
2023.*
2023.02-1
2023.02-2
2023.05-1
2023.05-2
2023.08-1
2023.11-1
2023.11-2
2023.11-3
2023.11-4
2023.11-5
2023.11-6
2023.11-7
2023.11-8
2024.*
2024.02-1
2024.02-2
2024.05-1
2024.05-2
2024.08-1
2024.08-2
2024.08-3
2024.08-4
2024.11-1
2024.11-2
2024.11-3
2024.11-4
2024.11-5
2025.*
2025.02-1
2025.02-2
2025.02-3
2025.02-4
2025.02-5
2025.02-6
2025.02-7
2025.02-8
2025.02-9
2025.02-10
2025.05-1
2025.05-2
2025.08.01-1
2025.08.01-2
2025.08.01-3
2025.08.01-4
2025.08.01-5
2025.08.01-6
2025.11-1
2025.11-2
2025.11-3
2025.11-4
2025.11-5
2026.*
2026.02-1
2026.02-2
2026.02-3
2026.05-1
2026.05-2
2026.05-3
2026.08+ds-1
2026.08+ds-2
Debian:13 / edk2
Package
- Name
- edk2
- Purl
- pkg:deb/debian/edk2?arch=source&distro=trixie
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2025.*
2025.02-8
2025.02-8+deb13u1
2025.02-9
2025.02-10
2025.05-1
2025.05-2
2025.08.01-1
2025.08.01-2
2025.08.01-3
2025.08.01-4
2025.08.01-5
2025.08.01-6
2025.11-1
2025.11-2
2025.11-3
2025.11-4
2025.11-5
2026.*
2026.02-1
2026.02-2
2026.02-3
2026.05-1
2026.05-2
2026.05-3
2026.08+ds-1
2026.08+ds-2
Debian:14 / edk2
Package
- Name
- edk2
- Purl
- pkg:deb/debian/edk2?arch=source&distro=forky
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected