CVE-2023-31342: Insufficient Granularity of Access Control

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

CVE-2024-21925: Improper Input Validation

Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution...

PT-2025-6391

Name of the Vulnerable Software and Affected Versions AmdCpmDisplayFeatureSMM driver affected versions not specified Description The issue is related to a SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver. This could allow locally authenticated attackers to overwrite SMRAM,...

CVE-2023-31343: Insufficient Granularity of Access Control

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

PT-2025-6414

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to improper input validation in the SMM handler, which may allow a privileged attacker to overwrite SMRAM, potentially leading to...

CVE-2022-30772

Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memory. Function 0x52 of the PnpSmm driver is passed the address and size of data to write into the SMBIOS table, but manipulation of the address could be used by malware to overwrit...

PT-2022-20306 · Insyde · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel 5.0 versions prior to 05.09.41 Kernel 5.1 versions prior to 05.17.43 Kernel 5.2 versions prior to 05.27.30 Kernel 5.3 versions prior to 05.36.30 Kernel 5.4 versions prior to 05.44.30 Kernel 5.5 versions prior to 05.52.30 Description:...