shim-signed vulnerabilities

CVEs whose affected-version data names the shim-signed package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19411Low· 3.9

3mo ago

Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader.

▾ SunlitRed Hat · shim-signedEPSS 0.13%via CVEORG