Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

edk2

An integer overflow vulnerability (CVE-2024-38796) exists in the edk2 package's PeCoffLoaderRelocateImage function, part of the Embedded Development Kit (EDK) used to enable UEFI support for virtual machines such as QEMU and KVM. This vulnerability affects Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. Red Hat has issued a security update to address this issue.

The vulnerability CVE-2024-38796 involves integer overflows in the PeCoffLoaderRelocateImage function within the edk2 package, which provides sample 64-bit UEFI firmware for virtual machines. This flaw could potentially lead to memory corruption or other unintended behavior during the relocation of PE/COFF images. Red Hat has released a security advisory (RHSA-2024:9956) and corresponding package updates for Red Hat Enterprise Linux 9.2 Extended Update Support and related products to fix this issue.

Detailed information about Red Hat Security Advisory: edk2 security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details,

Red Hat Security Advisory: edk2 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:9956

https://access.redhat.com/security/updates/classification/#moderate

2315390

Canonical URL

Red Hat Security Advisory: edk2 security update

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

CVE-2024-38796 identifies a heap-based buffer overflow vulnerability categorized under CWE-122 within the PeCoffLoaderRelocateImage() function of the TianoCore EDK2 project. EDK2 is an open-source implementation of the UEFI (Unified Extensible Firmware Interface) firmware environment, widely used by hardware manufacturers to initialize hardware and boot operating systems. The vulnerability arises from improper handling of memory during the relocation of PE/COFF images, which can be triggered by an attacker with adjacent network access. This overflow can corrupt memory, leading to potential arbitrary code execution or denial of service at the firmware level. The CVSS v3.1 score of 5.9 reflects an attack vector requiring adjacent network access (AV:A), high attack complexity (AC:H), low privileges (PR:L), no user interaction (UI:N), and impacts confidentiality (C:L), integrity (I:H), and availability (A:L). While no public exploits or patches are currently available, the vulnerability poses a risk to the firmware integrity of affected devices, potentially allowing attackers to compromise system boot processes or implant persistent malware below the OS level. The affected versions are not explicitly detailed beyond '0', indicating possibly all current versions or an unspecified range. The vulnerability was reserved in June 2024 and published in late September 2024, suggesting recent discovery and disclosure.

Detailed information about CVE-2024-38796: CWE-122 Heap-based Buffer Overflow in TianoCore EDK2 affecting TianoCore EDK2. Get real-time updates, technical detai

CVE-2024-38796: CWE-122 Heap-based Buffer Overflow in TianoCore EDK2 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-38796: CWE-122 Heap-based Buffer Overflow in TianoCore EDK2


Red Hat Security Advisory: edk2 security updateCVE-2024-38796 0 An integer overflow vulnerability (CVE-2024-38796) exists in the edk2 package's PeCoffLoaderRelocateImage function, part of the Embedded Development Kit (EDK) used to enable UEFI support for virtual machines such as QEMU and KVM. This vulnerability affects Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. Red Hat has issued a security update to address this issue. MediumVulnerability#gcve #csaf #cve-2024-38796 Join the discussion	GCVE Database	11/19/2024, 01:35:52 UTC Added: 06/25/2026, 21:47:21 UTC
CVE-2024-38796: CWE-122 Heap-based Buffer Overflow in TianoCore EDK2CVE-2024-38796 0 EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2024-38796 #cwe-122 Join the discussion	CVE Database V5	09/27/2024, 21:45:00 UTC Added: 11/03/2025, 19:53:51 UTC

Threats Tagged 'cve-2024-38796'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-38796'

Lead Pen Test Professional