CVE-2017-5731

—

CVSS 3.1

7.8 high

EPSS

<1%p33

Published

Oct 28, 2019 (Oct 28, 2019)

Modified

Jun 17, 2026

Description

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access.

Vendors: tianocore
Products: edk2
Weakness: CWE-119
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.