Approved changes feed: RSS · Atom
cpe:2.3:a:xen:varstored:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Xen (f270236f-a538-5294-a46e-e4b9797d2f33) |
|---|---|
| Product | Varstored (e51c5f68-e5fd-5adb-bebd-a84d4d602d2a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58151 |
vulnerable | 2026-07-29 00:04:14.183322 |
varstored: TOCTOU issues with mapped guest memory
varstored is a component of the Xapi toolstack handling UEFI Variables
for a VM. It has a communication path with OVMF inside the VM involving
mapping a buffer prepared by OVMF.
Within varstored, there were insufficient compiler barriers, creating
TOCTOU issues with data in the shared buffer.
The exact vulnerable behaviour depends on the code generated by the
compiler. In a build of varstored using default settings, the attacker
can control an index used in a jump table.
Published: 2026-07-09T14:45:16.531Z
Updated: 2026-07-09T15:41:25.431Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.