CVE-2024-38798: Uncleared password keystrokes in circular queue can lead to information disclosure or escalation of privilege
EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to
possible information disclosure or escalation of privilege
and impact Confidentiality.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38798?
CVE-2024-38798 is classified as a medium severity vulnerability with a CVSS score of 5.8.
How does CVE-2024-38798 affect system security?
CVE-2024-38798 can lead to the exposure of sensitive information or possible privilege escalation due to uncleared password keystrokes.
What are the potential impacts of exploiting CVE-2024-38798?
Exploitation of CVE-2024-38798 may result in unauthorized access to confidential information and escalation of user privileges.
Who can exploit CVE-2024-38798?
CVE-2024-38798 requires local access for an attacker to exploit the vulnerability effectively.
How can I mitigate CVE-2024-38798?
To mitigate CVE-2024-38798, ensure that all affected BIOS components are updated and follow best practices for securing local access.