TianoCore EDK II (EDK2) 202405
Approved changes feed: RSS · Atom
cpe:2.3:a:tianocore:edk2:202405:*:*:*:*:*:*:*part: a version: 202405 update: *
| Vendor | Tianocore (ccbf46b2-b58a-5da6-848c-b10970eb3ad4) |
|---|---|
| Product | Edk2 (26013cd7-5d6e-50a1-b64f-acdb9bfd5566) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/tianocore/edk2 |
purl2cpe | 2026-11-04 15:35:25.742968 |
pkg:deb/debian/edk2 |
purl2cpe | 2026-11-04 15:35:25.742969 |
pkg:deb/ubuntu/edk2 |
purl2cpe | 2026-11-04 15:35:25.742971 |
pkg:github/tianocore/edk2 |
purl2cpe | 2026-11-04 15:35:25.742972 |
pkg:github/tianocore/tianocore.github.io |
purl2cpe | 2026-11-04 15:35:25.742974 |
pkg:rpm/centos/edk2 |
purl2cpe | 2026-11-04 15:35:25.742975 |
pkg:rpm/fedora/edk2 |
purl2cpe | 2026-11-04 15:35:25.742976 |
pkg:rpm/opensuse/edk2 |
purl2cpe | 2026-11-04 15:35:25.742978 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2486 |
vulnerable | 2026-06-08 07:16:57.106088 |
UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu
The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based decision to continue running inside the Shell itself, which is believed to be sufficient to enforce Secure Boot restrictions. This is an additional repair on top of the incomplete fix for CVE-2023-48733.
Published: 2025-11-26T17:33:17.506Z
Updated: 2025-11-26T18:25:29.426Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.