CVE-2019-14562

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	Extensible Firmware Interface Development Kit (EDK II)	EDK II

References

https://bugzilla.tianocore.org/show_bug.cgi?id=2215Issue Tracking, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.htmlMailing List, Third Party Advisory
https://bugzilla.tianocore.org/show_bug.cgi?id=2215Issue Tracking, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00032.htmlMailing List, Third Party Advisory

Timeline

Published: Nov 23, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-145637.8Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-145657.8Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, ma CVE-2019-145667.8Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information CVE-2019-145687.8Improper permissions in the executable for Intel(R) RST before version 17.7.0.1006 may allow an authenticated user to potentially enable esc CVE-2019-145697.8Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of CVE-2019-14577.8A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'Micro CVE-2019-145707.8Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege, denial of s CVE-2019-145745.5Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially CVE-2019-145757.8Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via lo CVE-2019-14587.8An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k CVE-2019-145847.8Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-145868.0Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure