CVE-2019-11098

CVE-2019-11098 is an insufficient input validation vulnerability in the MdeModulePkg of EDKII, affecting tianocore edk_ii. With physical access, an unauthenticated attacker could exploit this to achieve escalation of privilege, denial of service, or information disclosure. Rated 6.8 MEDIUM, the attack requires physical access but is low complexity with no user interaction. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.