CVE-2019-11098

n/a / Tianocore PUBLISHED

Description (CNA)

Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.

Affected (CNA)

Vendor / product	Versions
n/a / Tianocore	affected See references

CWE

No CWE identifiers supplied.

References

https://edk2-docs.gitbook.io/security-advisory/bootguard-toctou-vulnerability

ADP enrichment

CVE

No English description supplied.

https://edk2-docs.gitbook.io/security-advisory/bootguard-toctou-vulnerability