Skip to content
Fencer Intel
medium 6.0

CVE-2018-12181 json

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege vi…

published 7y ago modified 4mo ago also EUVD-2018-4159

cvss
6.0
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 37%
public exploits
0
none known

Summary

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.

Patch / fix

  • edk2 Debian 14, Debian 13, Debian 12 0~20181115.85588389-3

debian advisories DEBIAN-CVE-2018-12181

  • edk2 Ubuntu 16.04 LTS 0~20160408.ffea0a2c-2ubuntu0.1
  • edk2 Ubuntu 18.04 LTS 0~20180205.c0d9813c-2ubuntu0.2

ubuntu advisories UBUNTU-CVE-2018-12181

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • edk2 RHEL 8 20190308git89910a39dcfd-6.el8
  • edk2-ovmf RHEL 8 20190308git89910a39dcfd-6.el8
  • edk2-aarch64 RHEL 8 20190308git89910a39dcfd-6.el8
  • ovmf RHEL 7 20180508-6.gitee3198e672e2.el7
  • OVMF RHEL 7 20180508-6.gitee3198e672e2.el7

red hat advisories RHSA-2019:3338RHSA-2019:2125

  • ovmf SLE Module for Server Applications 15 2017+git1510945757.b2662641d5-5.19.1
  • ovmf SLES for SAP 12 SP4, SLES 12 SP4, SLED 12 SP4 2017+git1510945757.b2662641d5-3.13.1
  • ovmf SLES for SAP 12 SP3, SLES 12 SP3 2017+git1492060560.b6d11d7c46-4.23.1

suse advisories SUSE-SU-2019:0804-1SUSE-SU-2019:0766-1SUSE-SU-2019:0738-1

  • ovmf openSUSE Tumbleweed 202105-3.4
  • ovmf openSUSE Leap 15.0 2017+git1510945757.b2662641d5-lp150.4.16.1

opensuse advisories openSUSE-SU-2024:11134-1openSUSE-SU-2019:1172-1

Is CVE-2018-12181 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2018-12181 updated cvss 5.3

edk2: Stack buffer overflow with corrupted BMP

  • Red Hat Enterprise Linux AppStream (v. 8) edk2 20190308git89910a39dcfd-6.el8, edk2-ovmf 20190308git89910a39dcfd-6.el8, edk2-aarch64 20190308git89910a39dcfd-6.el8
    fixed: vendor fix RHSA-2019:3338
  • Red Hat Enterprise Linux Server (v. 7) ovmf 20180508-6.gitee3198e672e2.el7, OVMF 20180508-6.gitee3198e672e2.el7
    fixed: vendor fix RHSA-2019:2125

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.43% chance of exploitation in the next 30 days, higher than 37% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.0 6.0 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
NVD 2.0 3.6 AV:L/AC:L/Au:N/C:N/I:P/A:P

Affected products

  • Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II)

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.