GSD-2022-1000138 drm/nouveau: fix off by one in BIOS boundary checking

drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.228 by commit...

GSD-2022-1000112 drm/nouveau: fix off by one in BIOS boundary checking

drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.265 by commit...

GSD-2022-1000091 drm/nouveau: fix off by one in BIOS boundary checking

drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.300 by commit...

CVE-2021-39297

Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...

CVE-2021-39300

Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...

CVE-2021-39299

Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...

CVE-2021-39300

Summary of CVE-2021-39300 (CVE record and linked sources): The issue concerns potential vulnerabilities in UEFI firmware (BIOS) for some HP PC products that may allow local privilege escalation and arbitrary code execution. The vulnerability is rooted in the UEFI firmware/BIOS itself, with impact...

CVE-2021-39300

Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...

CVE-2021-39299

CVE-2021-39299 concerns UEFI firmware (BIOS) in some HP notebook/desktop platforms. The vulnerability could allow escalation of privilege and arbitrary code execution via the firmware. HP has released security updates (HPSBHF03765) with minimum mitigated versions for affected platforms. Other con...

CVE-2021-39299

Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution...

CVE-2021-39297

Technical details (affected products, vulnerable components, exploitability, and remediation specifics) are not publicly available in the provided documents; monitor for updates.

Dell Client Commercial Data Forgery Issue Vulnerability

Dell Client Commercial is a line of workstation equipment from Dell, Inc. The Dell Client Commercial has a security vulnerability that stems from the device's susceptibility to an insufficient data authentication vulnerability. An authenticated attacker could use this vulnerability to install...

OESA-2022-1515 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as...

CVE-2022-22567

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware...

CVE-2022-22567

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware...

Design/Logic Flaw

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware...

CVE-2022-22567

Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malicious user may exploit this vulnerability in order to install modified BIOS firmware...

CVE-2022-22567

CVE-2022-22567 affects Dell Client Commercial (and Consumer) platforms and is caused by insufficient verification of data authenticity, enabling an authenticated attacker to install modified BIOS firmware. The connected records confirm the vulnerability targets Dell client platforms and involve B...

Insyde InsydeH2O has an unspecified vulnerability (CNVD-2022-10279)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. Operating System H2O UEFI firmware contains a security vulnerability that can be exploited by attacker...

Insyde InsydeH2O Buffer Overflow Vulnerability (CNVD-2022-10275)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware has a buffer overflow vulnerability that can be exploited to write fixed...