CVE-2021-28216 Memory corruption in EDK II
Attackers can exploit a pointer read from NVRAM in PEI to cause memory corruption, potentially leading to code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-28216?
CVE-2021-28216 is a high-severity memory corruption vulnerability in TianoCore EDK II, published on 5 Aug 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.
Which versions are affected by CVE-2021-28216?
It affects 1 product.
Products include Tianocore Edk Ii.
How do I fix CVE-2021-28216?
Change a configuration setting.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-28216 being exploited?
There is no known exploitation of CVE-2021-28216 in the wild and no public exploit code.
Other vulnerabilities in TianoCore EDK II
- CVE-2018-12178 Memory corruption in Extensible Firmware Interface Development Kit (EDK II)
- CVE-2018-12179 Privilege escalation in Extensible Firmware Interface Development Kit (EDK II)
- CVE-2018-3613 Privilege escalation in Extensible Firmware Interface Development Kit (EDK II)
- CVE-2019-11098 Other in Tianocore
- CVE-2018-12183 Memory corruption in Extensible Firmware Interface Development Kit (EDK II)
Sources
Also known as DEBIAN-CVE-2021-28216, GHSA-6wgv-vj43-rpr5, OESA-2021-1458, UBUNTU-CVE-2021-28216.