Search: CVE-2022-36763

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.

Several vulnerabilities were discovered in the TianoCore EDK II UEFI firmware used in Google Compute Engine VMs. These vulnerabilities could allow an attacker to bypass secure boot, resulting in false measurements during the secure boot process, including when used in Shielded VMs. Google has patched these vulnerabilities across Compute Engine, and all VMs are now protected. No customer action is required.