CVE-2022-24418

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

Intel Xeon Scalable Processors 安全漏洞

Intel Xeon Scalable Processors is a scalable server central processing unit CPU from Intel Corporation USA. A security vulnerability exists in Intel 3rd Generation Xeon Scalable Processors BIOS versions prior to MR7, which can be exploited by attackers to access sensitive information...

CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

Input validation

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

CVE-2021-26388

CVE-2021-26388 matches the initial description: improper validation of the BIOS directory can cause reads beyond the RAM directory table, exposing out-of-bounds memory and potentially causing a denial of service. Connected advisories (SUSE-SU-2022:1840-1, 1846-1, 1847-1) reference this CVE as par...

Intel BIOS firmware 缓冲区错误漏洞

Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in Intel BIOS firmware, which originates from an out-of-bounds write in the BIOS authentication code module that can be...

Intel BIOS firmware 输入验证错误漏洞

Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the Intel BIOS firmware that stems from incorrect input validation. An attacker could exploit the vulnerability to...

PT-2022-9753 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to improper validation of the BIOS directory, which may allow searches to read beyond the directory table copy in RAM. This can expose out of bounds memory...

Intel BIOS firmware 安全漏洞

Intel BIOS firmware is a set of programs from Intel Corporation that are solidified onto a ROM chip on the motherboard inside a computer. Intel BIOS firmware has a security vulnerability that can be exploited by an attacker to gain elevated privileges...

Intel BIOS firmware 安全漏洞

Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in Intel BIOS firmware, which arises from improper access control in the BIOS authentication code module and can be...

Intel BIOS firmware 安全漏洞

Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the Intel BIOS firmware, which stems from inadequate control flow management in the BIOS firmware, and can be exploited...

Multi-vendor BIOS Security Vulnerabilities (May 2022) - Lenovo Support US

No description provided...

CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

HPESBHF04286 rev.4 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Server - Prior to 2.6605172022 - Addresses an incomplete fix for CVE-2021-0159, CVE-2021-33123, and CVE-2021-33124 HPE ProLian...

PT-2022-3803 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to insufficient control flow management in the BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2022-3790 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to the use of an out-of-range pointer offset in the BIOS firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalatio...

PT-2022-4314 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware for some Intel Processors. This may allow a privileged user to potentially enable escalation of privilege via...

PT-2022-3804 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to improper access control in the BIOS authenticated code module for some Intel Processors. This may allow a privileged user to potentially enable escalation o...

PT-2022-3789 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to deficiencies in handling exceptional states in the BIOS microcode of Intel processors. It may allow a privileged user to potentially enable escalation of...