CVE-2024-38796

Published: October 1, 2024Last modified: June 5, 2025

Description

EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability.

Severity score breakdown

Parameter	Value
Base score	5.9
Attack Vector	ADJACENT_NETWORK
Attack complexity	HIGH
Privileges required	LOW
User interaction	NONE
Scope	UNCHANGED
Confidentiality	LOW
Integrity impact	HIGH
Availability impact	LOW
Vector	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Status

Product	Release	Package	Status
Alpaquita Linux	23 LTS	edk2	Unknown (0.0.202208-r0)
Alpaquita Linux	Stream	edk2	Unknown (0.0.202302-r0)

References

How to Fix Liberica NIK Not Starting on macOS Catalina and Later

If you use macOS Catalina and later you may encounter the issue that prevents Liberica NIK from starting. To fix it, run the following:

sudo xattr -r -d com.apple.quarantine path/to/graalvm/folder/

If you need more help, check out the FAQ at the bottom of this page or contact us.