NetworkPkg/IScsiDxe has remotely exploitable buffer... · CVE-2021-38575 · GitHub Advisory Database · GitHub

NetworkPkg/IScsiDxe has remotely exploitable buffer...

Critical severity Unreviewed Published Dec 2, 2021 to the GitHub Advisory Database • Updated Nov 3, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.

References

Published by the National Vulnerability Database

Dec 1, 2021

Published to the GitHub Advisory Database Dec 2, 2021

Last updated Nov 3, 2025

Weaknesses

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. Learn more on MITRE.

CWE-124

Buffer Underwrite ('Buffer Underflow')

The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer. Learn more on MITRE.