CVE-2024-38796 | TianoCore EDK2 up to edk2-stable202405 PeCoffLoaderRelocateImage heap-based overflow (GHSA-xpcr-7hjq-m6qm)

A vulnerability classified as critical has been found in TianoCore EDK2 up to edk2-stable202405. This affects the function PeCoffLoaderRelocateImage. The manipulation leads to heap-based buffer overflow.

This vulnerability is uniquely identified as CVE-2024-38796. The attack can only be done within the local network. There is no exploit available.