Insyde InsydeH2O 安全漏洞

Insyde InsydeH2O is a C source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O with kernel versions 5.1 through 5.5. An attacker...

The vulnerability of the System Management Unit (SMU) component of AMD processors allows attackers to disclose protected information.

The vulnerability of the System Management Unit SMU component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CVE-2022-34376

Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause a denial of service during SMM...

PT-2023-13369 · Dell · Dell Precision Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge BIOS affected versions not specified Dell Precision BIOS affected versions not specified Description: The issue concerns an improper SMM communication buffer verification vulnerability. A local malicious user with high privileg...

PT-2023-13368 · Dell · Dell Precision Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge BIOS affected versions not specified Dell Precision BIOS affected versions not specified Description: The issue is related to an improper input validation vulnerability. A local authenticated malicious user may potentially...

CVE-2022-34398

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system...

CVE-2022-34403

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploit this vulnerability by using an SMI to send larger than expected input to a parameter to gain arbitrary code execution in SMRAM...

CVE-2022-34400

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially exploit this vulnerability to perform an arbitrary write to SMRAM during SMM...

Dell BIOS 缓冲区错误漏洞

The Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the presence of a heap buffer overflow vulnerability that could be exploited by a local attacker with administrator privileges to perform...

Dell BIOS 安全漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the presence of a TOCTTOU vulnerability, which could be exploited by an authenticated, local malicious user to execute arbitrary code on the...

Dell BIOS 缓冲区错误漏洞

A buffer overflow vulnerability exists in Dell BIOS, which is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. The vulnerability stems from a boundary error when handling untrusted input. A locally authenticated attacker could exploit the vulnerability to execu...

CVE-2022-40135

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40136

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

CVE-2022-40134

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory...

Lenovo Desktops 缓冲区错误漏洞

Lenovo Desktops Lenovo desktops are desktop computers from Lenovo China. The Lenovo Desktops suffer from a buffer error vulnerability that stems from an information leak in the SMI handler that could allow an attacker with local access and elevated privileges to read SMM memory...

Lenovo Desktop 安全漏洞

Lenovo Desktops are desktop computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Desktop that stems from a buffer overflow in the SMI handler, which could allow an attacker with local access and elevated privileges to execute arbitrary code...

Lenovo Desktops 缓冲区错误漏洞

Lenovo Desktops Lenovo desktops are desktop computers from Lenovo China. The Lenovo Desktops suffer from a buffer error vulnerability that stems from an information leak in the SMI handler that could allow an attacker with local access and elevated privileges to read SMM memory...

Lenovo Desktops 缓冲区错误漏洞

Lenovo Desktops Lenovo desktops are desktop computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Desktops that stems from an information leak in the SMI handler that could allow an attacker with local access and elevated privileges to read SMM memory...

kernel: i2c: unbounded length leads to buffer overflow in ismt_access()

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. In particular, the userspace controllable "data-block0" variable was not capped to a numbe...

kernel: i2c: unbounded length leads to buffer overflow in ismt_access()

A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2CSMBUSBLOCKPROCCALL case via the ioctl I2CSMBUS with malicious input data. In particular, the userspace controllable "data-block0" variable was not capped to a numbe...