What’s Vulnerable › Vulnerabilities

CVE-2019-0160

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-27 · updated 2026-06-17
• Weakness: CWE-120

Description

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.

Affected products

• Fedoraproject Fedora: 30
• openSUSE Leap: 15.0
• Red Hat Enterprise Linux: 8.0
• RedHat Enterprise Linux Eus: 8.1, 8.2, 8.4
• RedHat Enterprise Linux Server: 7.0
• RedHat Enterprise Linux Server Aus: 8.2, 8.4
• RedHat Enterprise Linux Server Tus: 8.2, 8.4
• Extensible Firmware Interface Development Kit (EDK II): all versions

References

• https://tianocore-docs.github.io/SecurityAdvisory/draft/partitiondxe-and-udf-buffer-overflow.html
• https://tianocore-docs.github.io/SecurityAdvisory/draft/partitiondxe-and-udf-buffer-overflow.html

Get alerted when CVE-2019-0160 or the next vulnerability affects your stack