646 matches found
CVE-2021-26384
A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...
Command injection
A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...
CVE-2021-26384
CVE-2021-26384 is a vulnerability described as a malformed System Management Interface (SMI) command that can corrupt the SMI Trigger Info data structure, potentially enabling out-of-bounds memory reads/writes when an SMI is triggered. The AMD ADM/AMD-SB-1027 bulletin lists this CVE among others ...
CVE-2021-26384
A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...
Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85078)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to bypass security controls in SMM by sending malicious input to SMI...
CVE-2022-26862
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
CVE-2022-26864
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
Input validation
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
Input validation
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
CVE-2022-26864
The CVE-2022-26864 issue concerns Dell BIOS, where an input validation error in BIOS could be exploited by a locally authenticated attacker to bypass security controls in SMM by sending malicious input to an SMI. Multiple sources (NVD, CNVD, CNNVD, CVE records) describe the vulnerability as affec...
CVE-2022-26863
CVE-2022-26863 affects Dell BIOS (embedded BIOS on motherboard). The issue is an Input Validation vulnerability in Dell BIOS that can be exploited by a locally authenticated attacker who sends malicious input to an SMI to bypass security controls in SMM. Affected component: Dell BIOS firmware on ...
CVE-2022-26863
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
CVE-2022-26862
Dell BIOS contains an Input Validation vulnerability in prior BIOS versions. A locally authenticated attacker could potentially exploit malformed input to an SMI to bypass security controls in SMM. The CVE’s connected documents corroborate Dell BIOS as the affected component and describe the issu...
CVE-2022-26862
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
CVE-2022-26863
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85080)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...
Dell BIOS Input Validation Error Vulnerability (CNVD-2022-85079)
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...
CVE-2022-24417
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
Input validation
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
CVE-2022-24418
CVE-2022-24418 concerns Dell BIOS, where an input validation error in the BIOS code enables an authenticated local attacker to gain arbitrary code execution in SMM via a System Management Interrupt (SMI). The root cause is improper input validation within Dell BIOS, specifically when handling SMI...