buildroot ▾
›
2025.02.x ▾
›
vulnerability
›
CVE-2024-38805
Component Overview
Vulnerability Overview
Name
CVE-2024-38805
Source
NVD (
link
)
Debian (
link
)
Description
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.
CWEs
CWE-190
Published Date
Aug 12, 2025
Updated Date
Jun 17, 2026
Workaround
-
Advisories
Analysis
#
Affected Component
Analysis
edk2
Patched
Vulnerability Ratings
#
6.3
CVSSv31
NaN
other
Others affected component
#
Name
Project
Project Version
Version
Status
edk2
buildroot
master
edk2-stable202602
Not Affected
Resolved with patches
#
edk2 (buildroot:2025.02.x)
#
Title
Author
Resolve
1
NetworkPkg/IScsiDxe:Fix for out of bound memory access for
Santhosh Kumar V <santhoshkumarv@ami.com>
CVE-2024-38805