CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

CVE-2022-32295

CVE-2022-32295 – Summary (supported by connected docs) Affected platforms: Ampere Altra and AltraMax devices with the Altra reference design of UEFI prior to SRP 1.09. Vulnerability: The UEFI implementation in the Altra reference design allows insecure access to SPI-NOR by the OS/hypervisor compo...