Description
Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access. (CVE-2019-14558)
Memory leak in ArpOnFrameRcvdDpc (CVE-2019-14559)
Numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib (CVE-2019-14563)
DxeImageVerificationHandler() fails open in case of dbx signature check (CVE-2019-14575)
Potential use-after-free due to the original configuration runtime memory is freed but it is still exposed to the OS runtime (CVE-2019-14586)
Double-unmap issue in SdMmcCreateTrb function in MdeModulePkg/Bus/Pci/SdMmcPciHcDxe/SdMmcPciHci.c (CVE-2019-14587)