{"id":"CVE-2026-97631","published":"2026-10-22T17:17:02.027","lastModified":"2026-10-22T17:40:46.877","description":"EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds\nWrite”, Classic\nBuffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful exploitation of this vulnerability\ncan lead to arbitrary\ncode execution. It could also impact\nConfidentiality,\nIntegrity,\nand Availability.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-120","CWE-131","CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m","tags":[]}],"exploitRefs":[{"url":"https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m","tags":[]}],"hasPoc":true,"ai":null}