CVE-2025-2295

Published Mar 14, 2025

Last updated 21 days ago

CVSS low 3.5

Overview

Description
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.
Source
infosec@edk2.groups.io
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
3.5
Impact score
2.5
Exploitability score
0.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L
Severity
LOW

Weaknesses

infosec@edk2.groups.io
CWE-190

Social media

Hype score
Not currently trending

  1. New post from https://t.co/uXvPWJy6tj (CVE-2025-2295 | TianoCore EDK2 up to edk2-stable202502 integer overflow (GHSA-8522-69fh-w74x)) has been published on https://t.co/cYS6lsgcV8

    @WolfgangSesin

    15 Mar 2025

    25 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References