PT-2025-32242 · Edk2+4 · Edk2+4

Christopher Domas · Published 2025-08-06 · Updated 2025-11-28 · CVE-2025-3770

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EDK2 (affected versions not specified)

Description EDK2 contains a vulnerability in BIOS that may allow an attacker to cause a “Protection Mechanism Failure” with local access. Successful exploitation of this issue could lead to arbitrary code execution, impacting confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

AZL-66108

AZL-66119

AZL-66122

BDU:2025-12585

CVE-2025-3770

GHSA-VX5V-4GG6-6QXR

OESA-2025-2298

OESA-2025-2299

OESA-2025-2300

OESA-2025-2386

OESA-2025-2387

OESA-2025-2388

USN-7894-1

USN-7894-2

Affected Products

Debian

Edk2

Linuxmint

Red Os

Ubuntu

References · 71

• 🔥 https://github.com/drago-96/CVE-2022-0778 · Exploit
• 🔥 https://github.com/yywing/cve-2022-0778 · Exploit
• 🔥 https://github.com/jkakavas/CVE-2022-0778-POC · Exploit
• https://cve.org/CVERecord?id=CVE-2025-3770 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-3770 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-5535 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0286 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2388 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-45237 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38797 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-9143 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2299 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3817 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38796 · Vendor Advisory