CVE-2025-22830

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...

CVE-2024-38805

CVE-2024-38805 is an EDK2 BIOS vulnerability where a user may cause an Integer Overflow or Wraparound via network, potentially causing a denial of service. Connected advisories confirm affected EDK2 implementations across Linux distributions (Oracle Linux ELSA advisories for OL8/OL9, Ubuntu USN-7...

CVE-2024-38805 iSCSI Remote Memory Corruption and Denial of Service

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

CVE-2025-22830 SmiFlash Race Condition Vulnerability

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...

CVE-2025-22834 ThirdPartyVideo SetVariable Vulnerability

AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability...

AMD Server Vulnerabilities – August 2025

Summary Potential vulnerabilities in AMD EPYC™ Processor platforms that affect IOMMU, AMD Secure Encrypted Virtualization – Secure Nested Paging SEV-SNP and other platform components, were found during audits performed internally and by third parties. Mitigations have been provided in AMD EPYC™...

PT-2025-32670

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: EDK2 BIOS contains a vulnerability where a user may cause an Integer Overflow or Wraparound via network means. Successful exploitation of this issue may lead to a denial of service...

HP BIOS Flash Protection Security Update

A potential security vulnerability has been identified in the System BIOS for some HP PC products, which might allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is...

HPESBHF04912 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01192, UPLR3 - Intel TDX Module Software Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.4011-08-2024 HPE Alletra 4120 - Prior to 2.4011-08-2024 HPE Alletra 4140 - Prior to 2.4011-08-2024 HPE ProLiant DL110 Gen11 - Prior to...

HPESBHF04922 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processors, INTEL-SA-01311, Intel Xeon 6 Processor with Intel TDX Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 - Prior to 1.4005-22-202...

HPESBHF04913 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01245, 2025.2 IPU - Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.5004-22-2025 HPE Alletra 4120 - Prior to 2.5004-22-2025 HPE Alletra 4140 - Prior to 2.5004-22-2025 HPE ProLiant DL110 Gen11 - Prior to...

HPESBHF04924 rev.1 - Certain HPE ProLiant DL/XL Servers Using AMD EPYC Processor BIOS, AMD-SB-3014: AMD Server Vulnerabilities, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Unauthorized Data Injection, Unauthorized Data Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL325 Gen12 - Prior to 1.1005-27-2025 HPE ProLiant Compute DL345 Gen12 - Prior to...

HPESBHF04914 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01249, 2025.2 IPU, Intel Processor Stream Cache Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.5004-22-2025 HPE Alletra 4120 - Prior to 2.5004-22-2025 HPE Alletra 4140 - Prior to 2.5004-22-2025 HPE ProLiant DL20 Gen11 - Prior to...

Linux Distros Unpatched Vulnerability : CVE-2025-38332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: lpfc: Use memcpy for BIOS version The strlcat with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the...

scsi: lpfc: Use memcpy() for BIOS version

...

CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

AZL-66119 CVE-2025-3770 affecting package edk2 for versions less than 20230301gitf80f052277c8-43

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

AZL-66122 CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

DEBIAN-CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...