Edk2 · Edk2 · CVE-2022-36765
**Name of the Vulnerable Software and Affected Versions**
EDK2 (affected versions not specified)
**Description**
The issue is related to the CreateHob() function in EDK2, which is susceptible to an integer overflow that can lead to a buffer overflow. This can be triggered via a local network, potentially compromising confidentiality, integrity, and/or availability.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.