CVE-2019-14584: Null Pointer Dereference
AuthenticodeVerify() calls OpenSSLs d2iPKCS7() API to parse asn encoded signed authenticode pkcs#7 data. when this successfully returns, a type check is done by calling PKCS7typeissigned() and then Pkcs7->d.sign->contents->type is used. It is possible to construct an asn1 blob that successfully decodes and have d2iPKCS7() return a valid pointer and have PKCS7typeissigned() also return success but have Pkcs7->d.sign be a NULL pointer.
Reference: https://bugzilla.tianocore.org/showbug.cgi?id=1914
Other sources
Null pointer dereference in Tianocore EDK2
— Microsoft
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-14584?
CVE-2019-14584 is a vulnerability that allows an authenticated user to potentially enable escalation of privilege via local access in Tianocore EDK2.
How severe is CVE-2019-14584?
CVE-2019-14584 has a severity value of 7.8, which is considered high.
Which software is affected by CVE-2019-14584?
Tianocore EDK2 versions up to and excluding 2020-10-21 are affected by CVE-2019-14584.
How can an authenticated user exploit CVE-2019-14584?
An authenticated user can potentially enable escalation of privilege via local access using CVE-2019-14584.
Is there a fix available for CVE-2019-14584?
It is recommended to update Tianocore EDK2 to a version after 2020-10-21 to mitigate CVE-2019-14584.