Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Edk2 | Tianocore | - (including) | - (including) |
| Edk2 | Ubuntu | bionic | * |
| Edk2 | Ubuntu | eoan | * |
| Edk2 | Ubuntu | esm-apps/bionic | * |
| Edk2 | Ubuntu | esm-apps/xenial | * |
| Edk2 | Ubuntu | trusty | * |
| Edk2 | Ubuntu | xenial | * |