Threat Investigation
Request a demo

CVE-2024-1298

Medium

Description

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability.

SeverityMedium
CVSS6.0
Exploit probability—
ProductTianocore Edk2
PublishedMay 30, 2024
First seenMay 30, 2024
Weakness typeCWE-369CWE-369

How to fix

Update
  • TianoCore edk2edk2-stable202405 or later

Affected products

ProductAffected versionsFixed in
TianoCore edk2v < edk2-stable202405edk2-stable202405

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.