Lucene search
K

13 matches found

Prion
Prion
added 2022/11/15 9:15 p.m.20 views

Buffer overflow

In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in process leads to a TOCTOU problem that could be used by an attacker to cause SMRAM corruption and escalation of privileges The UsbCoreDxe module creates a working buffer for USB...

3.4CVSS8.3AI score0.00135EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/11/15 12:15 a.m.21 views

CVE-2022-33983

DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the NvmExpressLegacy driver could cause SMRA...

7CVSS0.00158EPSS
Exploits0References2
NVD
NVD
added 2022/11/15 12:15 a.m.18 views

CVE-2022-33984

DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdMmcDevice driver could cause SMRAM corrupti...

7CVSS0.00151EPSS
Exploits0References3
Prion
Prion
added 2022/11/15 12:15 a.m.25 views

Hardcoded credentials

DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdHostDriver driver could cause SMRAM...

3.5CVSS6.8AI score0.00132EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/11/15 12:15 a.m.22 views

Information disclosure

DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the NvmExpressLegacy driver could cause SMRA...

3.5CVSS6.8AI score0.00158EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/11/15 12:15 a.m.22 views

Information disclosure

DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the NvmExpressDxe driver could cause SMRAM...

3.5CVSS6.8AI score0.00132EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/11/14 11:15 p.m.19 views

Hardcoded credentials

DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack... DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cau...

3.4CVSS6.5AI score0.00151EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2022/11/14 12:0 a.m.27 views

CVE-2022-33983

DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the NvmExpressLegacy driver could cause SMRA...

7.1AI score0.00158EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/11/14 12:0 a.m.27 views

CVE-2022-33908

DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdHostDriver driver could cause SMRAM...

7.1AI score0.00132EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/11/14 12:0 a.m.23 views

CVE-2022-33909

DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the HddPassword driver could cause SMRAM corrupti...

7.1AI score0.00132EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/11/14 12:0 a.m.28 views

CVE-2022-31243

Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM corruption through a TOCTOU attack.. "DMA transactions which are targeted at input buffers used for the software SMI handl...

6.8AI score0.00151EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/11/14 12:0 a.m.30 views

CVE-2022-33985

DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the NvmExpressDxe driver could cause SMRAM...

7.1AI score0.00132EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/11/14 12:0 a.m.30 views

CVE-2022-33984

DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdMmcDevice driver could cause SMRAM corrupti...

7.1AI score0.00151EPSS
Exploits0References3
Rows per page
Query Builder