Input validation

2023-10-0404:15:00

PRIOn knowledge base

www.prio-n.com

uefi

input validation

galaxy book

local attacker

smm memory corruption

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption.

CPENameOperatorVersion
galaxy_book_firmwareeq< oct-2023
galaxy_book_odyssey_firmwareeq< oct-2023
galaxy_book_pro_360_firmwareeq< oct-2023
galaxy_book_pro_firmwareeq< oct-2023