CVE-2021-28211

CVE-2021-28211

Vendor Tianocore

Product EDK II

Weakness CWE-122

Published June 11, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.

Key dates

02Disclosure timeline

June 11, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-28211 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

04Related CVE

CVE-2023-24912 Windows Graphics Component Elevation of Privilege Vulnerability CVE-2021-38404 Delta Electronics DOPSoft 2 Heap-based Buffer Overflow CVE-2025-1176 GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow CVE-2026-34628 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) CVE-2026-6846 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing