CVE-2018-12182 — edk2: insufficient memory write in SMM service leads to privilege escalation

Back Back to CVE browser

MEDIUM

edk2: insufficient memory write in SMM service leads to privilege escalation

Published Mar 27, 2019

6.7

MEDIUM

CVSS 3.0

EPSS 0.41%

Description

Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

Affected products

Vendor Extensible Firmware Interface Development Kit (EDK II) Product Extensible Firmware Interface Development Kit (EDK II) Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Extensible Firmware Interface Development Kit (EDK II)

n/a

Version	Status	Constraints

Red Hat Enterprise Linux 7

ovmf

Not affected
Red Hat Enterprise Linux 8

edk2

Not affected
Red Hat Virtualization 4

redhat-virtualization-host

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	ovmf	Not affected	n/a
Red Hat Enterprise Linux 8	edk2	Not affected	n/a
Red Hat Virtualization 4	redhat-virtualization-host	Not affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.41% 0.00412

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00412

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.41% (0.00412)	33.10th	v5 (v2026.06.15)
Jun 15, 2026	0.41% (0.00412)	32.64th	v5 (v2026.06.15)
Mar 17, 2025	0.10% (0.00097)	24.94th	v4 (v2025.03.14)
Dec 12, 2024	0.06% (0.00059)	26.93th	v3 (v2023.03.01)
Jun 13, 2024	0.06% (0.00059)	25.03th	v3 (v2023.03.01)
Mar 20, 2024	0.06% (0.00059)	22.99th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00950)	32.28th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00950)	13.46th	v2 (v2022.01.01)
Feb 3, 2022	1.29% (0.01294)	30.79th	v5 (v2026.06.15)
Apr 14, 2021	1.29% (0.01294)	0.00th	v1

Weaknesses (2)

CWE-441

CWE-787

Out-of-bounds Write

References (8)

http://www.securityfocus.com/bid/107648
vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2018-12182
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1694081
Issue Tracking
https://edk2-docs.gitbooks.io/security-advisory/content/sw-smi-confused-deputy-smramsavestate_c.html
x_refsource_CONFIRMPatchVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/
vendor-advisoryx_refsource_FEDORA
https://nvd.nist.gov/vuln/detail/CVE-2018-12182
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us
x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2018-12182

Link	Providers	Tags
http://www.securityfocus.com/bid/107648		vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2018-12182		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1694081		Issue Tracking
https://edk2-docs.gitbooks.io/security-advisory/content/sw-smi-confused-deputy-smramsavestate_c.html		x_refsource_CONFIRMPatchVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQYVZRFEXSN3KS43AVH4D7QX553EZQYP/		vendor-advisoryx_refsource_FEDORA
https://nvd.nist.gov/vuln/detail/CVE-2018-12182
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03912en_us		x_refsource_CONFIRM
https://www.cve.org/CVERecord?id=CVE-2018-12182