CVE-2023-25494

CVE-2023-25494 targets Lenovo BIOS across Desktop, Smart Edge, and ThinkStation products, allowing a local attacker with high privileges to write to NVRAM variables. The issue is BIOS-level and the documented impact includes potential compromise of confidentiality, integrity, and availability. No...

CVE-2023-5912

A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileges to write to NVRAM variables...

CVE-2023-5912

A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileges to write to NVRAM variables...

CVE-2023-5912

CVE-2023-5912 appears in multiple sources tied to Lenovo Notebook firmware. The connected PT-2024-2539 entry attributes the issue to System Management Mode (SMM) handling in Lenovo firmware, with insufficient input validation that could allow a local attacker with elevated privileges to write to ...

Exploit for Classic Buffer Overflow in Dlink Dcs-932L_Firmware

Make Emulating Easy Again !ChatGPT Image Apr 22, 2025, 1256...

CVE-2024-23238

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables...

Design/Logic Flaw

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables...

CVE-2024-23238

CVE-2024-23238 : Apple macOS Sonoma 14.4 fixes an access issue where an app may be able to edit NVRAM variables. The vulnerability is addressed by improved access restrictions in Sonoma 14.4. Impact details in public sources indicate potential confidentiality/integrity concerns limited to local a...

CVE-2024-23238

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables...

CVE-2024-23238

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.4. An app may be able to edit NVRAM variables...

CVE-2024-20033

In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945...

CVE-2024-20033

In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945...

Information disclosure

In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945...

CVE-2024-20033

In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945...

CVE-2024-20033

CVE-2024-20033 concerns a missing bounds check in the nvram module of MediaTek-based components, enabling local information disclosure that requires SYSTEM/privilege level for exploitation. The documented impact is information disclosure with no user interaction; no exploit vectors are provided i...

CVE-2024-20033

In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ID: ALPS08499945...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the nvram module, which could lead to information disclosure...

PT-2024-18519 · Nvram · Nvram

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a missing bounds check in nvram, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is...

CVE-2024-27569

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the initnvram function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

PT-2024-21952 · Unknown · Lbt T300-T390

Name of the Vulnerable Software and Affected Versions: LBT T300-T390 version 2.2.1.8 Description: The issue is related to a stack overflow via the ApCliSsid parameter in the init nvram function, allowing attackers to cause a Denial of Service DoS via a crafted POST request. Recommendations: For L...