← All advisories

High severity8.1NVD Advisory· Published Dec 1, 2021· Updated Jun 17, 2026

CVE-2021-38575

CVE-2021-38575

Description

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

Affected products

9

Tianocore/Edk2
cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*
Range: <=202105
Insyde/Kernel6 versions
cpe:2.3:o:insyde:kernel:5.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:insyde:kernel:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:insyde:kernel:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:insyde:kernel:5.2:*:*:*:*:*:*:*
- cpe:2.3:o:insyde:kernel:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:insyde:kernel:5.4:*:*:*:*:*:*:*
- cpe:2.3:o:insyde:kernel:5.5:*:*:*:*:*:*:*
Tianocore/IScsiDxellm-create
Tianocore/Edk Iicpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

3

bugzilla.tianocore.org/show_bug.cginvdExploitIssue TrackingVendor Advisory
www.insyde.com/security-pledge/SA-2023025nvdThird Party Advisory
lists.debian.org/debian-lts-announce/2025/06/msg00007.htmlnvd

News mentions

0

No linked articles in our index yet.