2632 matches found
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
EUVD-2023-60617
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
CVE-2023-20576
CVE-2023-20576 is a HIGH severity (CVSS 3.1: 7.7) vulnerability in AMD processor firmware caused by insufficient verification of data authenticity in AGESA (AMD Generic Encapsulated Software Architecture). A local unauthenticated attacker can update SPI ROM data , potentially leading to denial of...
CVE-2023-20576
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...
CVE-2023-20576
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...
EUVD-2023-60616
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...
CVE-2023-20577: Stack-based Buffer Overflow
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...
CVE-2023-20576: Insufficient Verification of Data Authenticity
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...
SUSE CVE-2026-72133
In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devmrequestirq The driver calls devmrequestirq before initializing the completion used by the interrupt handler. Because the interrupt may occur immediately after...
SUSE CVE-2026-72152
In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtisspi: Use waitwoken in waitfortmpstat waiteventinterruptibletimeout evaluates its condition after setting the current task state to TASKINTERRUPTIBLE. With CONFIGDEBUGATOMICSLEEP this triggers a warning when the IRQ wai...
SUSE CVE-2026-72153
In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...
SUSE CVE-2026-72155
In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked or the few first blocks, if the user want to fully unlock the device it has two possibilities: - either it asks to unlock the entire...
SUSE CVE-2026-72156
In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...
CVE-2026-80712
A flaw was found in the Linux kernel's spi-qpic-snand driver. This vulnerability arises from an incorrect timing issue where the SETFEATURE command for SPI-NAND flash devices is executed before the intended feature value is properly written. Consequently, the device is programmed with an outdated...
Linux Distros Unpatched Vulnerability : CVE-2026-80712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which...
com.powsybl:powsybl-action-dsl (4.10.2), com.powsybl:powsybl-action-dsl-spi (4.10.2) +31 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.10.2)
com.powsybl:powsybl-computation-local MAVEN version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 4.10.2 - com.powsybl:powsybl-action-dsl-spi 4.10.2 -...
com.powsybl:powsybl-action-dsl (5.1.0), com.powsybl:powsybl-action-dsl-spi (5.1.0) +53 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (5.1.0)
com.powsybl:powsybl-computation-local MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 5.1.0 - com.powsybl:powsybl-action-dsl-spi 5.1.0 -...
com.powsybl:powsybl-action-dsl (4.8.0-rc2), com.powsybl:powsybl-action-dsl-spi (4.8.0-rc2) +30 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.8.0-rc2)
com.powsybl:powsybl-computation-local MAVEN version 4.8.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 4.8.0-rc2 - com.powsybl:powsybl-action-dsl-spi...
com.powsybl:powsybl-action-dsl (6.1.1), com.powsybl:powsybl-action-dsl-spi (6.1.1) +64 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (6.1.1)
com.powsybl:powsybl-computation-local MAVEN version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 6.1.1 - com.powsybl:powsybl-action-dsl-spi 6.1.1 -...