High severity7.0NVD Advisory· Published Jan 9, 2024· Updated Jun 17, 2026

CVE-2022-36763

Description

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable() function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tianocore/Edk23 versions
cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*range: <=202311
- (no CPE)
- (no CPE)range: *
osv-coords5 versions
pkg:rpm/almalinux/edk2-aarch64 pkg:rpm/almalinux/edk2-ovmf pkg:rpm/almalinux/edk2-tools pkg:rpm/almalinux/edk2-tools-doc pkg:rpm/opensuse/ovmf&distro=openSUSE%20Tumbleweed
< 20231122-6.el9+ 4 more
- (no CPE)range: < 20231122-6.el9
- (no CPE)range: < 20231122-6.el9
- (no CPE)range: < 20231122-6.el9
- (no CPE)range: < 20231122-6.el9
- (no CPE)range: < 202308-9.1

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2022-36763

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions