Vulnerability in Tianocore Edk Ii
CVE-2021-28216
BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.
EPSS: 0.001 (33.4th percentile) — read the EPSS interpretation.
Affected products
- Tianocore Edk Ii — versions EDK II Master
Weakness classification (CWE)
Public proof-of-concept exploits
References
- bugzilla.tianocore.org/show_bug.cgi (x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-28216?
- CVE-2021-28216 is a vulnerability in Tianocore Edk Ii, classified under CWE-587. Published 2021-08-05.
- Is CVE-2021-28216 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.