Lucene search
MitreCVELIST:CVE-2022-34325HistoryNov 14, 2022 - 12:00 a.m.
CVE-2022-34325
2022-11-1400:00:00
mitre
www.cve.org
4
dma transactions
storagesecuritycommanddxe
smram corruption
toctou attack
insyde engineering
EPSS
0
Percentile
12.6%
DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the StorageSecurityCommandDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by
Related
nvd
nvd
CVE-2022-34325
2022-11-14 23:15:11
cve
cve
CVE-2022-34325
2022-11-14 23:15:11
prion
prion
Memory corruption
2022-11-14 23:15:00
nessus
nessus
Siemens InsydeH2O Time-of-check Time-of-use Race Condition (CVE-2022-34325)
2023-09-26 00:00:00
hp
hp
Insyde UEFI Firmware March 2023 Security Update (TOCTOU)
2023-03-21 00:00:00