Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0~20191122.bd85bf54-2ubuntu3.3", "binary_name": "ovmf" }, { "binary_version": "0~20191122.bd85bf54-2ubuntu3.3", "binary_name": "qemu-efi" }, { "binary_version": "0~20191122.bd85bf54-2ubuntu3.3", "binary_name": "qemu-efi-aarch64" }, { "binary_version": "0~20191122.bd85bf54-2ubuntu3.3", "binary_name": "qemu-efi-arm" } ] }