5676 matches found
K000133635: Intel BIOS vulnerabilities CVE-2021-0187, CVE-2022-26837
Security Advisory Description Improper access control in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access. CVE-2021-0187 Improper input validation in the BIOS firmware for some IntelR Processors may allow a...
CVE-2023-25506
NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of t...
CVE-2023-25509
NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges...
NVIDIA DGX-1 授权问题漏洞
The NVIDIA DGX-1 is a personal computing device for deep learning applications from NVIDIA Corporation. A security vulnerability exists in the NVIDIA DGX-1 SBIOS Uncore PEI prior to version 23.04.01, which stems from a lack of authentication of SSA execution code and could lead to arbitrary code...
NVIDIA DGX-2 安全漏洞
The NVIDIA DGX-2 is a high-performance workstation for deep learning from NVIDIA, Inc. The NVIDIA DGX-2™ is NVIDIA's first 2 petaFLOPS appliance to integrate 16 NVIDIA V100 Tensor core GPUs, making it an excellent platform for tackling complex AI challenges. A security vulnerability exists in...
PT-2023-8262 · Nvidia · Nvidia Dgx A100 Sbios
Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue is related to incorrect dynamic variable analysis, which may allow a user to cause a dynamic variable evaluation by local access. A successful exploit of this issue...
NVIDIA DGX 安全漏洞
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS prior to version 1.18, which stems from an attacker being able to modify arbitrary memory in SMRAM by utilizing the NVME SMM API, which could resul...
NVIDIA DGX-2 缓冲区错误漏洞
The NVIDIA DGX-2 is a high-performance workstation for deep learning from NVIDIA, Inc. The NVIDIA DGX-2™ is NVIDIA's first 2 petaFLOPS appliance with 16 NVIDIA V100 Tensor core GPUs, making it an excellent platform for tackling complex AI challenges. A security vulnerability exists in NVIDIA DGX-...
Missing Linux Kernel mitigations for 'Cross-Thread Return Address Predictions' hardware vulnerability (AMD-SB-1045)
The remote host is missing one or more known mitigations on Linux Kernel side for the referenced SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
CVE-2023-22614
An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler...
CVE-2023-22614
An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler...
Input validation
An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler...
Insyde BIOS Vulnerabilities - Lenovo Support US
No description provided...
CVE-2023-22614
CVE-2023-22614 affects InsydeH2O (ChipsetSvcSmm) with kernel 5.0–5.5. The root cause is insufficient input validation in BIOS Guard updates, allowing a malformed BIOS Guard SMI to trigger memory corruption in SMM. The vulnerability is described across multiple sources (NVD, Red Hat, Tenable plugi...
Insyde InsydeH2O 缓冲区错误漏洞
Insyde InsydeH2O is a C-language source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the legacy BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O with kernel versions 5.0 to 5.5, which...
CVE-2023-22614
An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler...
PT-2025-53227
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds error exists in the BIOS parser within the DRM/AMD driver of the Linux kernel. The issue stems from a hardcoded array size of 8 in atomfirmware.h, which can be exceeded ...
CVE-2023-22614
An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler...
Dell Client BIOS RCE (DSA-2023-046)
The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by a remote code execution vulnerability due to improper input validation. A locally authenticated malicious user with admin privileges could exploit this vulnerability to perform arbitrary code execution...
CVE-2021-0187
A flaw was found in hw. Improper access control in the BIOS firmware for some IntelR processors may allow a privileged user to potentially enable an escalation of privilege via local access. Mitigation Please contact the hardware vendor for more updates...