Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-8u8r-kpy1-sua4
Summaryedk2: possible heap corruption with LzmaUefiDecompressGetInfo
Aliases
0
alias CVE-2021-28211
Fixed_packages
0
url pkg:alpm/archlinux/edk2-shell@202011-1
purl pkg:alpm/archlinux/edk2-shell@202011-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/edk2-shell@202011-1
1
url pkg:deb/debian/edk2@2020.11-1?distro=trixie
purl pkg:deb/debian/edk2@2020.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2020.11-1%3Fdistro=trixie
2
url pkg:deb/debian/edk2@2020.11-2%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/edk2@2020.11-2%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b7a9-w2fs-dbh7
1
vulnerability VCID-k7zd-s9nc-r3hb
2
vulnerability VCID-mg21-k76s-sqfp
3
vulnerability VCID-quq1-8rke-c3gf
4
vulnerability VCID-r48c-b4df-ffhx
5
vulnerability VCID-sd4b-3g4z-mubq
6
vulnerability VCID-z1gk-5f8t-tqau
7
vulnerability VCID-zd64-tjtu-sua3
8
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2020.11-2%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/edk2@2020.11-2%2Bdeb11u2
purl pkg:deb/debian/edk2@2020.11-2%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2atx-ce9g-tbds
1
vulnerability VCID-2nzx-2ymt-kuhv
2
vulnerability VCID-5czu-f7hq-v3bf
3
vulnerability VCID-9j1j-68kv-ufhn
4
vulnerability VCID-b7a9-w2fs-dbh7
5
vulnerability VCID-fxxz-zj2j-1qdz
6
vulnerability VCID-h4uc-8m6s-ffhy
7
vulnerability VCID-ha36-4zhr-mfcu
8
vulnerability VCID-hme1-vqbr-qydz
9
vulnerability VCID-k7zd-s9nc-r3hb
10
vulnerability VCID-mg21-k76s-sqfp
11
vulnerability VCID-nqk5-vmve-d3cq
12
vulnerability VCID-pf73-medx-quet
13
vulnerability VCID-quq1-8rke-c3gf
14
vulnerability VCID-r48c-b4df-ffhx
15
vulnerability VCID-r575-k7j8-hbfy
16
vulnerability VCID-sd4b-3g4z-mubq
17
vulnerability VCID-u9mt-wbe7-yfb6
18
vulnerability VCID-v17c-bytr-6qe4
19
vulnerability VCID-vzd4-6nza-4bgx
20
vulnerability VCID-w7z8-86tz-87eb
21
vulnerability VCID-x5x7-rwjh-wbb7
22
vulnerability VCID-z1gk-5f8t-tqau
23
vulnerability VCID-zd64-tjtu-sua3
24
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2020.11-2%252Bdeb11u2
4
url pkg:deb/debian/edk2@2022.11-6%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/edk2@2022.11-6%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b7a9-w2fs-dbh7
1
vulnerability VCID-k7zd-s9nc-r3hb
2
vulnerability VCID-mg21-k76s-sqfp
3
vulnerability VCID-quq1-8rke-c3gf
4
vulnerability VCID-r48c-b4df-ffhx
5
vulnerability VCID-sd4b-3g4z-mubq
6
vulnerability VCID-z1gk-5f8t-tqau
7
vulnerability VCID-zd64-tjtu-sua3
8
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2022.11-6%252Bdeb12u2%3Fdistro=trixie
5
url pkg:deb/debian/edk2@2025.02-8%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/edk2@2025.02-8%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zd64-tjtu-sua3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2025.02-8%252Bdeb13u1%3Fdistro=trixie
6
url pkg:deb/debian/edk2@2025.02-9?distro=trixie
purl pkg:deb/debian/edk2@2025.02-9?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zd64-tjtu-sua3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2025.02-9%3Fdistro=trixie
7
url pkg:deb/debian/edk2@2025.11-4?distro=trixie
purl pkg:deb/debian/edk2@2025.11-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2025.11-4%3Fdistro=trixie
8
url pkg:deb/debian/edk2@2025.11-5?distro=trixie
purl pkg:deb/debian/edk2@2025.11-5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@2025.11-5%3Fdistro=trixie
Affected_packages
0
url pkg:alpm/archlinux/edk2-shell@202008-1
purl pkg:alpm/archlinux/edk2-shell@202008-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12pz-n6cq-3kg9
1
vulnerability VCID-8u8r-kpy1-sua4
2
vulnerability VCID-mgbq-zh3v-uudp
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/edk2-shell@202008-1
1
url pkg:deb/debian/edk2@0~20131112.2590861a-3
purl pkg:deb/debian/edk2@0~20131112.2590861a-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12pz-n6cq-3kg9
1
vulnerability VCID-2atx-ce9g-tbds
2
vulnerability VCID-2nzx-2ymt-kuhv
3
vulnerability VCID-5czu-f7hq-v3bf
4
vulnerability VCID-7snr-xbcq-n7bn
5
vulnerability VCID-8u8r-kpy1-sua4
6
vulnerability VCID-9j1j-68kv-ufhn
7
vulnerability VCID-b7a9-w2fs-dbh7
8
vulnerability VCID-bev8-5pts-ryh5
9
vulnerability VCID-bfkk-ttfx-u3bb
10
vulnerability VCID-ckyc-4ewv-dyhx
11
vulnerability VCID-cqwr-6xc1-z7dy
12
vulnerability VCID-dst7-q1b4-63ft
13
vulnerability VCID-fjff-f33s-5yen
14
vulnerability VCID-fxxz-zj2j-1qdz
15
vulnerability VCID-h4uc-8m6s-ffhy
16
vulnerability VCID-ha36-4zhr-mfcu
17
vulnerability VCID-hme1-vqbr-qydz
18
vulnerability VCID-jru9-qcjy-93d1
19
vulnerability VCID-k7n3-f3ej-tqa9
20
vulnerability VCID-k7zd-s9nc-r3hb
21
vulnerability VCID-mfbp-ej43-hbh5
22
vulnerability VCID-mg21-k76s-sqfp
23
vulnerability VCID-mgbq-zh3v-uudp
24
vulnerability VCID-nqk5-vmve-d3cq
25
vulnerability VCID-pf73-medx-quet
26
vulnerability VCID-q448-gmmp-pkaa
27
vulnerability VCID-q4pf-fuwv-d3e3
28
vulnerability VCID-qbgw-q6yb-g7d3
29
vulnerability VCID-quq1-8rke-c3gf
30
vulnerability VCID-r48c-b4df-ffhx
31
vulnerability VCID-r575-k7j8-hbfy
32
vulnerability VCID-s1qw-sn4h-xyfe
33
vulnerability VCID-s69t-vde7-1fem
34
vulnerability VCID-sd4b-3g4z-mubq
35
vulnerability VCID-u9mt-wbe7-yfb6
36
vulnerability VCID-v17c-bytr-6qe4
37
vulnerability VCID-vzd4-6nza-4bgx
38
vulnerability VCID-w1dc-2k92-u7ha
39
vulnerability VCID-w7z8-86tz-87eb
40
vulnerability VCID-x5x7-rwjh-wbb7
41
vulnerability VCID-xb4u-976f-efdb
42
vulnerability VCID-xbzy-jfjd-j3ew
43
vulnerability VCID-yyqe-rr6t-c3hd
44
vulnerability VCID-z1gk-5f8t-tqau
45
vulnerability VCID-zd64-tjtu-sua3
46
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@0~20131112.2590861a-3
2
url pkg:deb/debian/edk2@0~20161202.7bbe0b3e-1%2Bdeb9u1
purl pkg:deb/debian/edk2@0~20161202.7bbe0b3e-1%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12pz-n6cq-3kg9
1
vulnerability VCID-2atx-ce9g-tbds
2
vulnerability VCID-2nzx-2ymt-kuhv
3
vulnerability VCID-5czu-f7hq-v3bf
4
vulnerability VCID-7snr-xbcq-n7bn
5
vulnerability VCID-8u8r-kpy1-sua4
6
vulnerability VCID-9j1j-68kv-ufhn
7
vulnerability VCID-b7a9-w2fs-dbh7
8
vulnerability VCID-bev8-5pts-ryh5
9
vulnerability VCID-bfkk-ttfx-u3bb
10
vulnerability VCID-ckyc-4ewv-dyhx
11
vulnerability VCID-cqwr-6xc1-z7dy
12
vulnerability VCID-dst7-q1b4-63ft
13
vulnerability VCID-fjff-f33s-5yen
14
vulnerability VCID-fxxz-zj2j-1qdz
15
vulnerability VCID-h4uc-8m6s-ffhy
16
vulnerability VCID-ha36-4zhr-mfcu
17
vulnerability VCID-hme1-vqbr-qydz
18
vulnerability VCID-jru9-qcjy-93d1
19
vulnerability VCID-k7n3-f3ej-tqa9
20
vulnerability VCID-k7zd-s9nc-r3hb
21
vulnerability VCID-mfbp-ej43-hbh5
22
vulnerability VCID-mg21-k76s-sqfp
23
vulnerability VCID-mgbq-zh3v-uudp
24
vulnerability VCID-nqk5-vmve-d3cq
25
vulnerability VCID-pf73-medx-quet
26
vulnerability VCID-q448-gmmp-pkaa
27
vulnerability VCID-q4pf-fuwv-d3e3
28
vulnerability VCID-qbgw-q6yb-g7d3
29
vulnerability VCID-quq1-8rke-c3gf
30
vulnerability VCID-r48c-b4df-ffhx
31
vulnerability VCID-r575-k7j8-hbfy
32
vulnerability VCID-s1qw-sn4h-xyfe
33
vulnerability VCID-s69t-vde7-1fem
34
vulnerability VCID-sd4b-3g4z-mubq
35
vulnerability VCID-u9mt-wbe7-yfb6
36
vulnerability VCID-v17c-bytr-6qe4
37
vulnerability VCID-vzd4-6nza-4bgx
38
vulnerability VCID-w1dc-2k92-u7ha
39
vulnerability VCID-w7z8-86tz-87eb
40
vulnerability VCID-x5x7-rwjh-wbb7
41
vulnerability VCID-xb4u-976f-efdb
42
vulnerability VCID-xbzy-jfjd-j3ew
43
vulnerability VCID-yyqe-rr6t-c3hd
44
vulnerability VCID-z1gk-5f8t-tqau
45
vulnerability VCID-zd64-tjtu-sua3
46
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@0~20161202.7bbe0b3e-1%252Bdeb9u1
3
url pkg:deb/debian/edk2@0~20181115.85588389-3%2Bdeb10u3
purl pkg:deb/debian/edk2@0~20181115.85588389-3%2Bdeb10u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12pz-n6cq-3kg9
1
vulnerability VCID-2atx-ce9g-tbds
2
vulnerability VCID-2nzx-2ymt-kuhv
3
vulnerability VCID-5czu-f7hq-v3bf
4
vulnerability VCID-7snr-xbcq-n7bn
5
vulnerability VCID-8u8r-kpy1-sua4
6
vulnerability VCID-9j1j-68kv-ufhn
7
vulnerability VCID-b7a9-w2fs-dbh7
8
vulnerability VCID-bev8-5pts-ryh5
9
vulnerability VCID-bfkk-ttfx-u3bb
10
vulnerability VCID-ckyc-4ewv-dyhx
11
vulnerability VCID-fjff-f33s-5yen
12
vulnerability VCID-fxxz-zj2j-1qdz
13
vulnerability VCID-h4uc-8m6s-ffhy
14
vulnerability VCID-ha36-4zhr-mfcu
15
vulnerability VCID-hme1-vqbr-qydz
16
vulnerability VCID-jru9-qcjy-93d1
17
vulnerability VCID-k7n3-f3ej-tqa9
18
vulnerability VCID-k7zd-s9nc-r3hb
19
vulnerability VCID-mfbp-ej43-hbh5
20
vulnerability VCID-mg21-k76s-sqfp
21
vulnerability VCID-mgbq-zh3v-uudp
22
vulnerability VCID-nqk5-vmve-d3cq
23
vulnerability VCID-pf73-medx-quet
24
vulnerability VCID-qbgw-q6yb-g7d3
25
vulnerability VCID-quq1-8rke-c3gf
26
vulnerability VCID-r48c-b4df-ffhx
27
vulnerability VCID-r575-k7j8-hbfy
28
vulnerability VCID-sd4b-3g4z-mubq
29
vulnerability VCID-u9mt-wbe7-yfb6
30
vulnerability VCID-v17c-bytr-6qe4
31
vulnerability VCID-vzd4-6nza-4bgx
32
vulnerability VCID-w1dc-2k92-u7ha
33
vulnerability VCID-w7z8-86tz-87eb
34
vulnerability VCID-x5x7-rwjh-wbb7
35
vulnerability VCID-xb4u-976f-efdb
36
vulnerability VCID-xbzy-jfjd-j3ew
37
vulnerability VCID-yyqe-rr6t-c3hd
38
vulnerability VCID-z1gk-5f8t-tqau
39
vulnerability VCID-zd64-tjtu-sua3
40
vulnerability VCID-zwx2-8yhh-7yef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/edk2@0~20181115.85588389-3%252Bdeb10u3
4
url pkg:rpm/redhat/edk2@20200602gitca407c7246bf-4.el8_4?arch=1
purl pkg:rpm/redhat/edk2@20200602gitca407c7246bf-4.el8_4?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8u8r-kpy1-sua4
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/edk2@20200602gitca407c7246bf-4.el8_4%3Farch=1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-28211.json
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-28211.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-28211
reference_id
reference_type
scores
0
value 0.0006
scoring_system epss
scoring_elements 0.18742
published_at 2026-04-01T12:55:00Z
1
value 0.0006
scoring_system epss
scoring_elements 0.18644
published_at 2026-04-16T12:55:00Z
2
value 0.0006
scoring_system epss
scoring_elements 0.18745
published_at 2026-04-12T12:55:00Z
3
value 0.0006
scoring_system epss
scoring_elements 0.18695
published_at 2026-04-13T12:55:00Z
4
value 0.0006
scoring_system epss
scoring_elements 0.18878
published_at 2026-04-02T12:55:00Z
5
value 0.0006
scoring_system epss
scoring_elements 0.18931
published_at 2026-04-04T12:55:00Z
6
value 0.0006
scoring_system epss
scoring_elements 0.18653
published_at 2026-04-07T12:55:00Z
7
value 0.0006
scoring_system epss
scoring_elements 0.18733
published_at 2026-04-08T12:55:00Z
8
value 0.0006
scoring_system epss
scoring_elements 0.18786
published_at 2026-04-09T12:55:00Z
9
value 0.0006
scoring_system epss
scoring_elements 0.18791
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-28211
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28211
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28211
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1883529
reference_id 1883529
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1883529
5
reference_url https://security.archlinux.org/AVG-1697
reference_id AVG-1697
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1697
6
reference_url https://access.redhat.com/errata/RHSA-2021:2591
reference_id RHSA-2021:2591
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:2591
7
reference_url https://usn.ubuntu.com/4923-1/
reference_id USN-4923-1
reference_type
scores
url https://usn.ubuntu.com/4923-1/
8
reference_url https://usn.ubuntu.com/7060-1/
reference_id USN-7060-1
reference_type
scores
url https://usn.ubuntu.com/7060-1/
Weaknesses
0
cwe_id 120
name Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
description The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-8u8r-kpy1-sua4