CVE-2024-21925

CVE-2024-21925 concerns the AmdPspP2CmboxV2 driver in the UEFI module. The flaw arises from insufficient input validation, enabling a privileged local attacker to overwrite SMRAM and achieve arbitrary code execution. Documentation notes this as a System Management Mode (SMM) related vulnerability...

CVE-2024-21925

Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution...

PT-2025-6405

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to improper input validation in the SMM handler, which may allow a privileged attacker to overwrite SMRAM, potentially leading to...

PT-2025-6391

Name of the Vulnerable Software and Affected Versions AmdCpmDisplayFeatureSMM driver affected versions not specified Description The issue is related to a SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver. This could allow locally authenticated attackers to overwrite SMRAM,...

PT-2025-6392

Name of the Vulnerable Software and Affected Versions AmdPspP2CmboxV2 driver affected versions not specified Description The issue is related to improper input validation within the driver, which may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution...

PT-2025-6414

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to improper input validation in the SMM handler, which may allow a privileged attacker to overwrite SMRAM, potentially leading to...

CVE-2024-0179: Improper Input Validation

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution...

CVE-2024-21925: Improper Input Validation

Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution...

CVE-2023-31342: Insufficient Granularity of Access Control

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

PT-2025-6406

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to improper input validation in the SMM handler, which may allow a privileged attacker to overwrite SMRAM, potentially leading to...

CVE-2023-31343: Insufficient Granularity of Access Control

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

CVE-2024-33657

This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service attacks...

CVE-2024-33657 Smm Callout in SmmComputrace Module

This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service attacks...

CVE-2024-33657 Smm Callout in SmmComputrace Module

This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service attacks...

Huawei PC Manager Improper Access Control Vulnerability

Huawei PC Manager is a computer management application from Huawei China. An improper access control vulnerability exists in Huawei PC Manager, which can be exploited by an attacker to cause a SMRAM disclosure...

CVE-2023-52710

Huawei Matebook D16Model: CREM-WXX9, BIOS: v2.26, As the communication buffer size hasn’t been properly validated to be of the expected size, it can partially overlap with the beginning SMRAM.This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of...

CVE-2023-52548

Huawei Matebook D16Model: CREM-WXX9, BIOS: v2.26 Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code execution in SMM...

CVE-2023-52547

Huawei Matebook D16Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of SMRAM and can potentially lead to code execution in SMM...

CVE-2023-52547

Huawei Matebook D16Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of SMRAM and can potentially lead to code execution in SMM...

CVE-2023-52710

Huawei Matebook D16Model: CREM-WXX9, BIOS: v2.26, As the communication buffer size hasn’t been properly validated to be of the expected size, it can partially overlap with the beginning SMRAM.This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of...