What’s Vulnerable › Vulnerabilities

CVE-2019-0161

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-27 · updated 2026-06-17
• Weakness: CWE-787

Description

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.

Affected products

• Extensible Firmware Interface Development Kit (EDK II): all versions

References

• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00046.html
• https://access.redhat.com/errata/RHSA-2019:2125
• https://access.redhat.com/errata/RHSA-2019:2437
• https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html
• https://lists.debian.org/debian-lts-announce/2021/04/msg00032.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00046.html
• https://access.redhat.com/errata/RHSA-2019:2125
• https://access.redhat.com/errata/RHSA-2019:2437
• https://edk2-docs.gitbooks.io/security-advisory/content/xhci-stack-local-stack-overflow.html

Get alerted when CVE-2019-0161 or the next vulnerability affects your stack