CVE-2021-28210

Published: Jun 11, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An unlimited recursion in DxeCore in EDK II.

Affected (1)

Products: Tianocore: Edk2

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tianocore Edk2	Before 202008

Related CWEs

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (2)

https://bugzilla.tianocore.org/show_bug.cgi?id=1743

Source: infosec@edk2.groups.io

ExploitIssue TrackingPatchVendor Advisory

https://bugzilla.tianocore.org/show_bug.cgi?id=1743

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchVendor Advisory

Timeline

No history available yet.