CVE-2022-32471

creationtimestamp| type| source ---|---|--- 2023-02-15 07:36:22+00:00| seen| https://t.me/cibsecurity/58208...

CVE-2022-32471

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe driver uses the command buffer to pass input and output data. By modifying the command buffer contents with DMA after the input parameters have been checked but before they are used, the IHISI SMM co...

CVE-2022-32471

CVE-2022-32471 affects InsydeH2O IhisiSmm via the IhisiDxe driver. The command buffer is used to pass input/output data; DMA can modify the command buffer contents after input checks but before use, potentially altering SMRAM or OS and causing data corruption or privilege escalation. Affected is ...

CVE-2022-32471

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe driver uses the command buffer to pass input and output data. By modifying the command buffer contents with DMA after the input parameters have been checked but before they are used, the IHISI SMM co...