PT-2025-11308 · Edk2+5 · Edk2+5

Published 2025-03-14 · Updated 2025-11-28 · CVE-2025-2295

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions: EDK2 (affected versions not specified)

Description: The issue is related to an Integer Overflow or Wraparound in the BIOS of EDK2, which can be triggered by a user through network means. A successful exploitation of this issue may lead to a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

AZL-58803

AZL-58822

AZL-58828

BDU:2025-11907

CVE-2025-2295

GHSA-8522-69FH-W74X

USN-7894-1

USN-7894-2

Affected Products

Astra Linux

Debian

Edk2

Linuxmint

Red Os

Ubuntu

References · 60

• 🔥 https://github.com/drago-96/CVE-2022-0778 · Exploit
• 🔥 https://github.com/yywing/cve-2022-0778 · Exploit
• 🔥 https://github.com/jkakavas/CVE-2022-0778-POC · Exploit
• https://ubuntu.com/security/CVE-2024-5535 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0286 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-45237 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-2295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38797 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-9143 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-2295 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38796 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2295 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-2511 · Vendor Advisory