CVE-2026-97631

{
  "etk_id": "ETK-2026-2955",
  "cve_id": "CVE-2026-97631",
  "display_id": "CVE-2026-97631",
  "ghsa_id": "GHSA-99cj-7hg9-mp4m",
  "euvd_id": "EUVD-2026-108230",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Out-of-bounds write in edk2 NetworkPkg PXE driver",
  "summary": "edk2 NetworkPkg's PXE Base Code driver can write beyond an ICMP error buffer while a system performs IPv4 or IPv6 PXE boot. An unauthenticated attacker able to send ICMP error traffic to the booting client could halt the boot process or run code before the operating system loads. Systems are exposed only while PXE network boot is active.",
  "mitigation": "Upgrade edk2 NetworkPkg to the recorded fixed release, Not patched currently. Until that update is deployed, disable PXE boot where possible and restrict PXE clients to trusted boot networks.",
  "vendor": "edk2",
  "product": "edk2:NetworkPkg",
  "affected": [
    {
      "affected_notes": [
        "EDK II master as of 2026-09-14"
      ],
      "affected_ranges": [],
      "ecosystem": "edk2",
      "fixed_versions": [
        "Not patched currently"
      ],
      "package_name": "NetworkPkg",
      "purl": null
    }
  ],
  "cwes": [
    120
  ],
  "cvss_score": 9.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 32.0754552,
  "t0_at": "2026-10-22T16:32:27.619000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-10-28T13:13:57+00:00",
      "days": 5.862145613425926,
      "is_lower_bound": false,
      "measured_at": "2026-10-22T16:32:27.619000+00:00",
      "url": "https://github.com/slabbdev/uefi-pxe-cve-2026-97631"
    },
    "trigger_signal": {
      "at": "2026-10-22T16:32:27.619000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-22T16:32:27.619000+00:00",
      "url": "https://github.com/tianocore/edk2/security/advisories/GHSA-99cj-7hg9-mp4m"
    }
  }
}