A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader.
The code could be modified to include NULL pointer checkers in the code.
Before DevicePathToStr : "if (li == NULL || li->FilePath == NULL) return 0;"
After DevicePathToStr : "if (bootpath == NULL) return 0;"
At error: "if (bootpath != NULL)"