25 matches found
CVE-2026-19398
An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU...
EUVD-2026-66834
“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...
CVE-2026-19398
An out-of-bounds write in the SmiFlash SMM module of the ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption by sending a crafted software SMI (SW SMI) request with an oversized length value. The CVSS 4.0 score is 6.8 (Medium) , reflecting ...
CVE-2026-19398
An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU...
CVE-2026-19398
An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU...
CVE-2026-19398: Out-of-bounds Write
An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU...
PT-2026-82375
“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...
CVE-2023-43578
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2022-42277
NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...
EUVD-2023-47984
Malicious code in bioql PyPI...
CVE-2023-43578
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2023-43578
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...
Buffer overflow
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2023-43578
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2023-43578
The CVE-2023-43578 entry reports a buffer overflow in Lenovo Desktop SmiFlash module that could allow a local user with elevated privileges to execute arbitrary code. Affected: Lenovo Desktop products (SmiFlash component). Root cause: buffer overflow vulnerability. Impact: local code execution wi...
CVE-2023-43578: Buffer Copy without Checking Size of Input
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...
Lenovo Desktops Security Breach
Lenovo Desktops are desktop computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Desktop that originates from a buffer overflow in the SmiFlash module...
PT-2023-28866 · Lenovo · Lenovo Desktop
Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the SmiFlash module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the moment, the...
CVE-2022-42276
NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...
CVE-2022-42277
NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other...