CVE-2014-8271: Tianocore EDK2

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name.

Affected products

• Tianocore EDK2: before svn_16280 (fixed in svn_16280)

Published 2020-02-06. Last modified 2026-06-17.