UBUNTU-CVE-2021-38576

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system...

CVE-2021-38576

CVE-2021-38576 is described across several connected advisories as a BIOS/firmware issue in EDK II where a PC model’s Platform Authorization value can be left empty. This can permanently brick the TPM or cause non-permanent DoS. The affected component is EDK II (EFI/firmware tooling) within vario...

CVE-2021-38576

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system...

CVE-2021-38576

A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-permanently DoS the system...

The vulnerability of Intel processor BIOS systems, which allows attackers to enhance their privileges

The vulnerability of Intel processor BIOS systems is related to incorrect code generation. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2021-0158

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0157

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0158

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0158

CVE-2021-0158 involves improper input validation in the BIOS firmware for some Intel processors, enabling local privilege escalation by a user with privileged/local access. The connected intel advisory (INTEL-SA-00562) confirms this family, describing two CVEs in BIOS reference code and noting th...

CVE-2021-0158

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0157

CVE-2021-0157 is described in Intel’s BIOS Reference Code Advisory (INTEL-SA-00562). It denotes insufficient control flow management in BIOS firmware for certain Intel processors that could enable privilege escalation via local access. The advisory lists mitigations through firmware updates provi...

CVE-2021-0157

Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

ASUS P453UJ Buffer Overflow Vulnerability

ASUS P453UJ is a BIOS firmware from Asus ASUS of Taiwan, China. The ASUS P453UJ suffers from a buffer overflow vulnerability that originates from a local attacker, with the permission of a regular user, who can modify the BIOS by replacing or padding the contents of the specified Memory DataBuffe...

CVE-2020-12944

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...

CVE-2020-12944

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...

Input validation

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...

CVE-2020-12944

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...

CVE-2020-12944

CVE-2020-12944 affects AMD Secure Processor (ASP) firmware, where insufficient validation of BIOS image length could allow arbitrary code execution. AMD documentation (AMD-SB-1027/1021) lists affected platforms across desktop, mobile and server AMD systems and provides mitigations via AGESA PI fi...