Launchpad.net

CVE 2018-12181

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access.

See the CVE page on Mitre.org for more details.