Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "qemu-efi-aarch64": "0~20191122.bd85bf54-2ubuntu3.3", "ovmf": "0~20191122.bd85bf54-2ubuntu3.3", "qemu-efi": "0~20191122.bd85bf54-2ubuntu3.3", "qemu-efi-arm": "0~20191122.bd85bf54-2ubuntu3.3" } ] }