Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged
created 1 month, 3 weeks ago
Integer overflow in the Drive Execution Environment (DXE) phase in …

Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restrictions via crafted data.

References

Affected products

BIOS
  • ==unknown
SCT3
  • ==before 5/23/2014

Matching in nixpkgs

pkgs.gnomeExtensions.one-click-bios

Restart into firmware settings directly from OS

  • nixos-unstable 8
    • nixpkgs-unstable 8
    • nixos-unstable-small 8
  • nixos-25.11 8
    • nixos-25.11-small 8
    • nixpkgs-25.11-darwin 8

Package maintainers