CVE-2026-14968
AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system instability, and lead to denial of service. It could also impact Integrity and Availability.
| CWE | CWE-787 |
| Vendor | tianocore |
| Product | edk2 |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for tianocore edk2
Be the first to know when new unknown vulnerabilities affecting tianocore edk2 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TianoCore / EDK2
0 ≤ edk2-stable202608
References
Credits
🔍 20000419