CVE-2025-2295

CVSS 3.1 Score 10 of 10 (high)

Details

Published Mar 14, 2025
CWE ID 89

Summary

CVE-2025-2295 represents a vulnerability found in EDK2's BIOS, allowing a user to cause an Integer Overflow or Wraparound via network means. This issue, if exploited, may result in a Denial of Service. No further details are available regarding potential escalation of privileges or unauthorized access. The impacted EDK2 version and specific network communication methods have yet to be determined. System administrators are advised to apply patches as soon as they become available to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share