Nixpkgs Security Tracker

Permalink CVE-2014-8271

created 1 month ago

Buffer overflow in the Reclaim function in Tianocore EDK2 before …

Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name.

References

http://sourceforge.net/p/edk2/code/16280/ x_refsource_MISC
http://www.kb.cert.org/vuls/id/533140 x_refsource_MISC
http://sourceforge.net/p/edk2/code/16280/ x_transferred x_refsource_MISC
http://www.kb.cert.org/vuls/id/533140 x_transferred x_refsource_MISC
http://www.kb.cert.org/vuls/id/533140 x_refsource_MISC
http://sourceforge.net/p/edk2/code/16280/ x_refsource_MISC
http://sourceforge.net/p/edk2/code/16280/ x_transferred x_refsource_MISC
http://www.kb.cert.org/vuls/id/533140 x_transferred x_refsource_MISC

Affected products

EDK2

==before SVN 16280

Matching in nixpkgs

pkgs.edk2

Intel EFI development kit

nixos-unstable 202511
- nixpkgs-unstable 202511
- nixos-unstable-small 202511
nixos-25.11 202508.01
- nixos-25.11-small 202508.01
- nixpkgs-25.11-darwin 202508.01

pkgs.edk2-uefi-shell

UEFI Shell from Tianocore EFI development kit

nixos-unstable 202511
- nixpkgs-unstable 202511
- nixos-unstable-small 202511
nixos-25.11 202508.01
- nixos-25.11-small 202508.01
- nixpkgs-25.11-darwin 202508.01