CVE-2022-40250

CVE-2022-40250 affects AMI Aptio 5.x via a stack overflow in the SMI handler of SmmSmbiosElog. The vulnerability allows local privilege escalation to System Management Mode (SMM), enabling arbitrary code execution in a highly privileged context, bypassing SMM SPI flash protections and potentially...