CVE-2024-38796

Summary

CVE-2024-38796 refers to a newly discovered vulnerability in EDK2's PeCoffLoaderRelocateImage function. An attacker can potentially cause memory corruption by exploiting an overflow in adjacent network data. The consequences of a successful attack are serious, as it may result in the loss of Confidentiality, Integrity, and Availability. The vulnerability could allow an attacker to gain unauthorized access to sensitive information, modify data, or disrupt services. EDK2 users are strongly advised to apply the forthcoming patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.