[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBmlJ26KRWKR7Xl_pf9c6V0oEk2f4PyQus3_VEfKNbfI":3,"g5a-risk:CVE-2021-38578":172},{"success":4,"data":5,"meta":170},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":51,"epssPercentile":27,"epssTimeSeries":52,"severity":53,"affectedProducts":54,"affectedProductsCount":80,"references":81,"referencesCount":101,"weaknesses":102,"weaknessesCount":116,"isActivelyExploited":50,"cisaInfo":27,"otxData":27,"relatedBlogPosts":117,"seoMetadata":118,"configurations":143,"relatedVendorCves":168,"notableEvents":169},"CVE-2021-38578","What is CVE-2021-38578?","Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.","2022-03-03T22:15:08.423","2025-11-03T20:15:49.767",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":39,"CVSSMetricV2":40,"CVSSMetricV40":27},[15,30],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":28,"ImpactScore":29},"infosec@edk2.groups.io","Secondary",{"Version":19,"VectorString":20,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":26,"BaseSeverity":22,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:L","LOCAL","HIGH","NONE","CHANGED","LOW",7.4,null,0.8,6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":34,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":35,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":36,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"NETWORK","UNCHANGED","CRITICAL",3.9,5.9,[],[41],{"Source":31,"Type":32,"CVSSData":42,"BaseSeverity":22,"ExploitabilityScore":48,"ImpactScore":49,"ACInsufInfo":50,"ObtainAllPrivilege":50,"ObtainUserPrivilege":50,"ObtainOtherPrivilege":50,"UserInteractionRequired":50},{"Version":43,"VectorString":44,"AccessVector":34,"AccessComplexity":25,"Authentication":23,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":45,"BaseScore":46,"BaseSeverity":47,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.01019,[51,51,51,51,51,51,51],"Critical",[55,60,65,68,71,74,77],{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"tianocore","edk2","*","cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"insyde","kernel","5.0","cpe:2.3:o:insyde:kernel:5.0:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":66,"criteria":67,"vulnerable":4},"5.1","cpe:2.3:o:insyde:kernel:5.1:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":69,"criteria":70,"vulnerable":4},"5.2","cpe:2.3:o:insyde:kernel:5.2:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":72,"criteria":73,"vulnerable":4},"5.3","cpe:2.3:o:insyde:kernel:5.3:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":75,"criteria":76,"vulnerable":4},"5.4","cpe:2.3:o:insyde:kernel:5.4:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":78,"criteria":79,"vulnerable":4},"5.5","cpe:2.3:o:insyde:kernel:5.5:*:*:*:*:*:*:*",7,[82,88,93,95,99],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fbugzilla.tianocore.org\u002Fshow_bug.cgi?id=3387","Tianocore",[86,87],"Issue Tracking","Vendor Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge\u002FSA-2023024","Insyde",[92],"Third Party Advisory",{"url":83,"source":84,"tags":94},[86,87],{"url":96,"source":97,"tags":98},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F06\u002Fmsg00007.html","Debian",[],{"url":89,"source":90,"tags":100},[92],5,[103,111],{"id":104,"name":105,"description":106,"extendedDescription":107,"status":108,"abstraction":109,"structure":110},"CWE-124","Buffer Underwrite ('Buffer Underflow')","The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.","This typically occurs when a pointer or its index is decremented to a position before the buffer, when pointer arithmetic results in a position before the beginning of the valid memory location, or when a negative index is used.","Incomplete","Base","Simple",{"id":112,"name":113,"description":114,"extendedDescription":47,"status":115,"abstraction":109,"structure":110},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Draft",2,[],{"title":119,"metaDescription":120,"keywords":121,"canonicalUrl":122,"structuredData":123},"What is CVE-2021-38578? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-38578, a critical severity cyber security vulnerability from 2022. Existing CommBuffer checks in SmmEntryPoint will not ca...","CVE-2021-38578, CVE-2021-38578 vulnerability, CVE-2021-38578 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, tianocore security, insyde security, edk2 vulnerability, kernel vulnerability","\u002Fwhat-is\u002Fcve-2021-38578",{"@context":124,"@type":125,"headline":119,"description":120,"datePublished":9,"dateModified":10,"author":126,"publisher":130,"about":134,"mainEntityOfPage":138,"articleSection":141,"keywords":142},"https:\u002F\u002Fschema.org","TechArticle",{"@type":127,"name":128,"url":129},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":127,"name":128,"url":129,"logo":131},{"@type":132,"url":133},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":135,"name":6,"description":136,"additionalType":137},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":139,"@id":140},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-38578","Cybersecurity","CVE-2021-38578, CVE-2021-38578 vulnerability, CVE-2021-38578 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[144,152],{"Operator":27,"Negate":27,"Nodes":145},[146],{"Operator":147,"Negate":50,"CPEMatch":148},"OR",[149],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":150,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":151},"A2B1E98B-2D63-42E3-B6F8-139CC32BA4B0","202202",{"Operator":27,"Negate":27,"Nodes":153},[154],{"Operator":147,"Negate":50,"CPEMatch":155},[156,158,160,162,164,166],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FFCC4619-B867-4E23-AF05-FF92B43628AF",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FB40061A-BEDF-4D72-BF2D-D1B10EB80A60",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9D6AFE61-A2A4-49DF-A8EE-B2F425DA7A08",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D21132C0-F2CF-4134-A165-926155031913",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":165,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6549F7F1-A438-4C84-9D66-C89C697E2A9B",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":167,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DE339FA1-8572-4365-B420-530D62686C08",[],[],{"lastModified":10,"cacheTime":171,"version":43},1792260078559,{"score":173,"band":174,"action":175,"scoredAt":176},54,"Medium","Plan remediation","2026-10-16T06:53:44.334189+00:00"]