{
  "cveId": "CVE-2024-38798",
  "url": "https://patchblox.com/security/cve/CVE-2024-38798",
  "summary": "CVE-2024-38798 is fixed in edk2 on 1 platform by DEBIAN-CVE-2024-38798 (version 2025.11-1), released December 9, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "edk2: EDK2 contains a vulnerability in BIOS where an attacker may cause \u201CExposure of Sensitive Information to an Unauthoriz...",
  "description": "EDK2 contains a vulnerability in BIOS where an attacker may cause \u201CExposure of Sensitive Information to an Unauthorized Actor\u201D by local access. Successful exploitation of this vulnerability will lead to   possible information disclosure or escalation of privilege   and impact Confidentiality.",
  "published": "2025-12-09T16:17:27Z",
  "severity": "",
  "epss": 0.00142,
  "epssPercentile": 0.03585,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "edk2",
      "release": "Debian 14",
      "fixedVersion": "2025.11-1",
      "fix": "DEBIAN-CVE-2024-38798",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-38798",
      "released": "2025-12-09T16:17:27Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}