Out-of-bounds read in edk2 - CVE-2024-38797

Vulnerability identifier: #VU118805

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-38797

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the HashPeImageByType() function when reading PE files. A remote attacker can create a specially crafted PE file, trick the victim into opening it, trigger an out-of-bounds read error and read contents of memory on the system.

edk2
openEuler
Ubuntu
Anolis OS
edk2 (Ubuntu package)
edk2
edk2-debuginfo
edk2-debugsource
edk2-devel
edk2-aarch64
edk2-help
edk2-ovmf
python3-edk2-devel
edk2-tools
edk2-loongarch64
edk2-riscv64
edk2-tools-doc

Install updates from vendor's website.

edk2 - update to edk2-stable202505
edk2 (Ubuntu package) - addressed in versions 2022.02-3ubuntu0.22.04.4, 2022.02-3ubuntu0.22.04.5, 2024.02-2ubuntu0.6, 2024.02-2ubuntu0.7, 2025.02-3ubuntu2.2
edk2 - update to 202308-25
edk2-debuginfo - update to 202308-25
edk2-debugsource - update to 202308-25
edk2-devel - update to 202308-25
edk2-aarch64 - update to 202308-25
edk2-help - update to 202308-25
edk2-ovmf - update to 202308-25
python3-edk2-devel - update to 202308-25
edk2-tools - update to 202402-17
edk2-aarch64 - update to 202402-17
edk2-loongarch64 - update to 202402-17
edk2-ovmf - update to 202402-17
edk2-riscv64 - update to 202402-17
edk2-tools-doc - update to 202402-17

• https://github.com/tianocore/edk2/security/advisories/GHSA-4wjw-6xmf-44xf
• https://github.com/tianocore/edk2/pull/10928

• Multiple vulnerabilities in edk2
• Ubuntu update for edk2
• openEuler update for edk2
• Anolis OS update for edk2
• Ubuntu update for edk2