CVE-2024-38796

MEDIUM

Published 2024-09-27T21:45:00.730Z

Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2024-38796. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1

5.9

/10

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Base Score Metrics

Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14

0.001

probability

of exploitation in the wild

There is a 0.1% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25

Exploit Probability

Percentile: 0.158

Higher than 15.8% of all CVEs

Attack Vector Metrics

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Impact Metrics

Confidentiality

LOW

Integrity

HIGH

Availability

LOW

Description

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

TianoCore

EDK2

Affected Versions:

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

2 posts

Reddit • 4 weeks, 1 day ago

Ambitious-Stomach-30

New BIOS update for gen 9. Contains nothing important General Information: NKCN32WW: BIOS Notification : 1. Fixed 1) N/A. 2. Add 1) Add Microsoft 2023 Cert. 3. Modified 1) Enhancement to address security vulnerability CVE-2025-4275. 2) Enhancement to address security vulnerability CVE-2024-55567. 3) Enhancement to address security vulnerability CVE-2024-13176. 4) …

Also mentions: CVE-2024-55567 CVE-2025-4275 CVE-2024-13176

8.0

View Original

Reddit • 2 months ago

TumbleweedAfter5531

Bios update legion go I’ve not installed it yet but noticed this news update Is it new? Changelog 1. Base on BIOS36. 2. Update AMD PI 1.2.0.0. 3. Add CVE-2024-36347 patch. 4. Add CVE-2023-40238 patch. 5. Add CVE-2024-38796 patch. 6. Add CVE-2024-6364 patch. 7. Add CVE-2024-52877 patch. 8. Add CVE-2024-52878 …

Also mentions: CVE-2024-36347 CVE-2024-6364 CVE-2024-52878 CVE-2024-52880 CVE-2024-52879 CVE-2024-52877 CVE-2023-40238

12.0

View Original

References

https://github.com/tianocore/edk2/security/advisories/GHSA-xpcr-7hjq-m6qm

Published: 2024-09-27T21:45:00.730Z

Last Modified: 2024-12-06T13:09:30.427Z

Copied to clipboard!